Configure oxidised user directly using chef resources

Configure letsencrypt user directly using chef resources

Configure apt user directly using chef resources

Drop unused gpsmid user on dev

Drop unused kibana role and cookbook

Drop some unused role accounts

Update alerts to check cinc-client instead of chef-client

Add apis user to test environment

Fixes #836

Workaround cinc ohai using wrong plugins directory

GHA cache cinc container image

prometheus: bump karma to v0.125

dns: Upgrade dnscontrol to v4.35.0

Remove support for chef-client

Update chef repository hooks for cinc

Add the cinc ohai plugin directory to the path

Make cinc the default

Switch web frontends to cinc

Switch muirdris to use cinc

Avoid trying to link to a deleted chef client key

Switch rhaegal to use cinc

Defer cleanup of chef until we are running under cinc

Switch meraxes to use cinc

Cleanup /opt/chef after migration to cinc

Use a hard link to migrate the chef client key to cinc

Switch albi to use cinc

Merge remote-tracking branch 'github/pull/835'

Add support for replacing chef-client with cinc-client

web: Also support acme redirect on HTTPS

nominatim: Support acme redirect on HTTPS

Merge remote-tracking branch 'github/pull/834'

Promote Paul to global admin

Add bogus user agent block

nominatim: send back header with server name

Merge remote-tracking branch 'github/pull/832'

build(deps): bump inspec-core from 5.23.6 to 5.24.5

Bumps [inspec-core](https://github.com/inspec/inspec) from 5.23.6 to 5.24.5.
- [Release notes](https://github.com/inspec/inspec/releases)
- [Changelog](https://github.com/inspec/inspec/blob/v5.24.5/CHANGELOG.md)
- [Commits](https://github.com/inspec/inspec/compare/v5.23.6...v5.24.5)

---
updated-dependencies:
- dependency-name: inspec-core
  dependency-version: 5.24.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Block bogus referers

Update api-statistics for new log format

nominatim: add custom nginx log format

web: log JA4H fingerprint

Merge remote-tracking branch 'github/pull/831'

build(deps): bump cookstyle from 8.5.3 to 8.6.4

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.5.3 to 8.6.4.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.5.3...v8.6.4)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Switch to using cinc for testing

Update APT signing key for passenger

Workaround inspec licensing issue breaking tests

web: reduce cores used during rails logrotate compress

Improve consistency of :location for site roles

web: reduce cores used during logrotate compress

imagery: fix titiler tile user format

nominatim: remove check for HTTP version

nominatim: add vary header to block responses

Update bundle

Add JA4 fingerprint to logging

naga: increase apache limits

prometheus: bump alertmanager to 0.31.1

Merge remote-tracking branch 'github/pull/828'

build(deps): bump faraday from 1.3.1 to 2.14.1

Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.1 to 2.14.1.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lostisland/faraday/compare/v1.3.1...v2.14.1)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: Fix fail2ban ignoreips join

nominatim: add fastly IPs to fail2ban ignore

nominatim: add a fast lane for requests from osm.org

wiki: Switch Captcha to Turnstile

Merge remote-tracking branch 'github/pull/827'

Handle /api/0.6/changeset/:id with the Rails app (not cgimap)

nominatim: increase warning threshold for replication delay even more

nominatim: switch to asgi/uwsgi protocol for gunicorn

dns: Upgrade dnscontrol to v4.33.0

prometheus: upgrade alertmanager to v0.31.0

Enable atlas cookbook on piasa

Enable atlas cookbook on orm

Enable atlas cookbook on rhaegal

Enable atlas cookbook on nidhogg

Enable atlas cookbook on ysera

Enable atlas cookbook on angor

Enable atlas cookbook on azure-01

Update branch name of OsmWikibase extension

Add Ruben to dev server

dns: Update dnscontrol to 4.32.0

community: Update discourse to v2026.1 (ESR)

Add ssh key for yuri

Give yuri access to muirdris

network: batch nftables blocks for nft submission

Back off SMTP retries more quickly

Improve ability to batch SMTP deliveries

Merge remote-tracking branch 'github/pull/826'

Merge remote-tracking branch 'github/pull/825'

build(deps): bump test-kitchen from 3.9.1 to 4.0.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.9.1 to 4.0.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.9.1...v4.0.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kitchen-dokken from 2.22.0 to 2.22.1

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.22.0 to 2.22.1.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.22.0...v2.22.1)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

dns: Update dnscontrol to 4.31.1

dns: Update dnscontrol to 4.31.0

Add ripe atlas software probe cookbook

increase alter time for nominatim replicaton delay

Update SST CLI to version 2.6

Install btree_gist owned by the apis user for dev instances

Merge remote-tracking branch 'github/pull/824'

build(deps): bump kitchen-inspec from 3.0.0 to 3.1.0

Bumps [kitchen-inspec](https://github.com/inspec/kitchen-inspec) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/inspec/kitchen-inspec/releases)
- [Changelog](https://github.com/inspec/kitchen-inspec/blob/main/CHANGELOG.md)
- [Commits](https://github.com/inspec/kitchen-inspec/compare/v3.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: kitchen-inspec
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Let cmake create the cgimap build directory if required

Make rails_port install node modules before running db:migrate

Merge remote-tracking branch 'github/pull/823'

Deploy a Rails app for pablobm

Add new SSH key for pablobm + label existing ones

community: Update discourse to v3.5.3