chef.git
13 months agoMake more fail2ban jail properties optional
Tom Hughes [Sat, 12 Oct 2019 14:49:19 +0000 (15:49 +0100)]
Make more fail2ban jail properties optional

13 months agoFix fail2ban servie
Tom Hughes [Sat, 12 Oct 2019 14:31:20 +0000 (15:31 +0100)]
Fix fail2ban servie

13 months agoEnable fail2ban for tile caches
Tom Hughes [Sat, 12 Oct 2019 10:54:44 +0000 (11:54 +0100)]
Enable fail2ban for tile caches

13 months agoDisable IPv6 for all squid instances
Tom Hughes [Sat, 12 Oct 2019 10:46:15 +0000 (11:46 +0100)]
Disable IPv6 for all squid instances

13 months agoSwitch toothless to squid 4
Tom Hughes [Thu, 10 Oct 2019 17:14:41 +0000 (18:14 +0100)]
Switch toothless to squid 4

13 months agoFix new cookstyle warnings
Tom Hughes [Mon, 7 Oct 2019 19:41:32 +0000 (20:41 +0100)]
Fix new cookstyle warnings

13 months agoUpdate bundle
Tom Hughes [Mon, 7 Oct 2019 19:40:20 +0000 (20:40 +0100)]
Update bundle

13 months agotilecache: remove peers from azure + stormfly-02
Grant Slater [Mon, 7 Oct 2019 18:29:05 +0000 (19:29 +0100)]
tilecache: remove peers from azure + stormfly-02

13 months agoUse bundle install deployment
Grant Slater [Sat, 5 Oct 2019 12:56:59 +0000 (13:56 +0100)]
Use bundle install deployment

13 months agoFix linting
Grant Slater [Tue, 1 Oct 2019 12:48:58 +0000 (13:48 +0100)]
Fix linting

13 months agoUpdate bundler
Grant Slater [Tue, 1 Oct 2019 12:41:20 +0000 (13:41 +0100)]
Update bundler

13 months agoAdd bundler gem
Grant Slater [Tue, 1 Oct 2019 12:09:18 +0000 (13:09 +0100)]
Add bundler gem

13 months agoAdd SoTM 2020
Grant Slater [Tue, 1 Oct 2019 11:28:53 +0000 (12:28 +0100)]
Add SoTM 2020

14 months agoUpdate carto stylesheet to v4.23.0
Tom Hughes [Sat, 21 Sep 2019 00:17:12 +0000 (01:17 +0100)]
Update carto stylesheet to v4.23.0

Closes #254

14 months agoAdd an extra resolve for nidhogg
Tom Hughes [Tue, 10 Sep 2019 20:22:54 +0000 (21:22 +0100)]
Add an extra resolve for nidhogg

14 months agoRemove some rubocop customisations that match cookstyle defaults
Tom Hughes [Mon, 9 Sep 2019 21:26:34 +0000 (22:26 +0100)]
Remove some rubocop customisations that match cookstyle defaults

14 months agoRemove no longer requried foodcritic customisations
Tom Hughes [Mon, 9 Sep 2019 21:08:23 +0000 (22:08 +0100)]
Remove no longer requried foodcritic customisations

14 months agoAvoid including Chef::Mixin::ShellOut in resources
Tom Hughes [Mon, 9 Sep 2019 19:00:53 +0000 (20:00 +0100)]
Avoid including Chef::Mixin::ShellOut in resources

14 months agoUpdate formatting of header comments
Tom Hughes [Mon, 9 Sep 2019 18:16:37 +0000 (19:16 +0100)]
Update formatting of header comments

14 months agoDrop long_description from metadata files
Tom Hughes [Mon, 9 Sep 2019 18:14:05 +0000 (19:14 +0100)]
Drop long_description from metadata files

14 months agoReplace foodcritic and rubocop with cookstyle
Tom Hughes [Mon, 9 Sep 2019 17:57:49 +0000 (18:57 +0100)]
Replace foodcritic and rubocop with cookstyle

14 months agoEnable peering for squid 4 caches
Tom Hughes [Mon, 9 Sep 2019 08:14:10 +0000 (09:14 +0100)]
Enable peering for squid 4 caches

14 months agoMerge remote-tracking branch 'github/pull/252'
Tom Hughes [Sat, 7 Sep 2019 15:28:13 +0000 (16:28 +0100)]
Merge remote-tracking branch 'github/pull/252'

14 months agoenable gadgets-edit rights to sysops
Yuri Astrakhan [Sat, 7 Sep 2019 15:18:39 +0000 (10:18 -0500)]
enable gadgets-edit rights to sysops

another issues with the new way gadgets are being used - need an extra right for sysops explicitly declared.

14 months agoMerge remote-tracking branch 'github/pull/251'
Tom Hughes [Fri, 6 Sep 2019 21:34:27 +0000 (22:34 +0100)]
Merge remote-tracking branch 'github/pull/251'

14 months agoapply changes to all sites, not just the private
Yuri Astrakhan [Fri, 6 Sep 2019 20:38:14 +0000 (15:38 -0500)]
apply changes to all sites, not just the private

made a mistake in the previous commit - the settings should apply to all sites instead.

14 months agoMerge remote-tracking branch 'github/pull/249'
Tom Hughes [Fri, 6 Sep 2019 18:18:29 +0000 (19:18 +0100)]
Merge remote-tracking branch 'github/pull/249'

14 months agoUpdate LocalSettings.php.erb
Yuri Astrakhan [Fri, 6 Sep 2019 17:54:13 +0000 (12:54 -0500)]
Update LocalSettings.php.erb

14 months agoafter MW upgrade sysops unable to edit MW UI
Yuri Astrakhan [Fri, 6 Sep 2019 16:10:42 +0000 (11:10 -0500)]
after MW upgrade sysops unable to edit MW UI

the new version moved UI-editing rights out of sysop and its own group because large wikis may have too big of a non-techy admin community (thousands). It would be pointless for a small wiki like ours.

14 months agoLock revision on org.civicrm.donotsendreportemail, which we do not control
Guillaume RISCHARD [Tue, 3 Sep 2019 20:46:20 +0000 (22:46 +0200)]
Lock revision on org.civicrm.donotsendreportemail, which we do not control

14 months agoIncrease apache server limit on piwik server
Tom Hughes [Tue, 3 Sep 2019 19:25:14 +0000 (20:25 +0100)]
Increase apache server limit on piwik server

14 months agopinning master, will run tests in another branch
Guillaume RISCHARD [Tue, 3 Sep 2019 18:03:42 +0000 (20:03 +0200)]
pinning master, will run tests in another branch

14 months agoPin osm username check to revision
Guillaume RISCHARD [Tue, 3 Sep 2019 17:24:07 +0000 (19:24 +0200)]
Pin osm username check to revision

14 months agoDrop publisher URL
Tom Hughes [Mon, 2 Sep 2019 07:53:27 +0000 (08:53 +0100)]
Drop publisher URL

14 months agoDisable HTTP2 for svn.openstreetmap.org
Tom Hughes [Sat, 31 Aug 2019 15:10:17 +0000 (16:10 +0100)]
Disable HTTP2 for svn.openstreetmap.org

14 months agoRemove world boundaries data source from tile servers
Tom Hughes [Sat, 31 Aug 2019 06:36:03 +0000 (07:36 +0100)]
Remove world boundaries data source from tile servers

14 months agoInstall water polygons on tile servers
Tom Hughes [Fri, 30 Aug 2019 18:41:00 +0000 (19:41 +0100)]
Install water polygons on tile servers

14 months agoUpdate carto stylesheet to v4.22.0
Tom Hughes [Fri, 30 Aug 2019 18:19:45 +0000 (19:19 +0100)]
Update carto stylesheet to v4.22.0

Closes #247

15 months agoDisable IPv6 support in squid on machines with no IPv6
Tom Hughes [Wed, 28 Aug 2019 18:18:33 +0000 (19:18 +0100)]
Disable IPv6 support in squid on machines with no IPv6

15 months agoUse composer to install libraries for mediawiki
Tom Hughes [Wed, 28 Aug 2019 17:36:23 +0000 (18:36 +0100)]
Use composer to install libraries for mediawiki

15 months agoAdd swap timeout to fume's squid cache stores
Tom Hughes [Wed, 28 Aug 2019 11:58:42 +0000 (12:58 +0100)]
Add swap timeout to fume's squid cache stores

15 months agoUpdate wiki to mediawiki 1.33
Tom Hughes [Tue, 27 Aug 2019 17:28:25 +0000 (18:28 +0100)]
Update wiki to mediawiki 1.33

15 months agoAdd osuadmin ssh public key
Grant Slater [Mon, 26 Aug 2019 22:27:50 +0000 (23:27 +0100)]
Add osuadmin ssh public key

15 months agomediawiki: run refreshLinks.php weekly
Grant Slater [Mon, 26 Aug 2019 21:27:40 +0000 (22:27 +0100)]
mediawiki: run refreshLinks.php weekly

15 months agoPass /ways and /relations calls to cgimap on dev
Tom Hughes [Fri, 23 Aug 2019 10:39:11 +0000 (11:39 +0100)]
Pass /ways and /relations calls to cgimap on dev

15 months agonginx: enable TLS 1.3
Grant Slater [Thu, 22 Aug 2019 21:22:29 +0000 (22:22 +0100)]
nginx: enable TLS 1.3

15 months agoFix rubocop warnings
Tom Hughes [Thu, 22 Aug 2019 20:22:01 +0000 (21:22 +0100)]
Fix rubocop warnings

15 months agoUpdate bundle
Tom Hughes [Thu, 22 Aug 2019 20:21:17 +0000 (21:21 +0100)]
Update bundle

15 months agoBump nokogiri to remove github security warning
Grant Slater [Thu, 22 Aug 2019 20:12:31 +0000 (21:12 +0100)]
Bump nokogiri to remove github security warning

15 months agonginx: Add ssl_stapling validation
Grant Slater [Thu, 22 Aug 2019 19:31:18 +0000 (20:31 +0100)]
nginx: Add ssl_stapling validation

15 months agoAllow overwrite when updating forum style
Tom Hughes [Thu, 22 Aug 2019 11:51:05 +0000 (12:51 +0100)]
Allow overwrite when updating forum style

15 months agoMerge remote-tracking branch 'github/pull/246'
Tom Hughes [Wed, 21 Aug 2019 16:06:02 +0000 (17:06 +0100)]
Merge remote-tracking branch 'github/pull/246'

15 months agoUpgrade foundation DWG and MWG wikis to 1.31
Tom Hughes [Wed, 21 Aug 2019 14:11:28 +0000 (15:11 +0100)]
Upgrade foundation DWG and MWG wikis to 1.31

15 months agoAdded new Air3 version
Stefan [Wed, 21 Aug 2019 13:54:22 +0000 (15:54 +0200)]
Added new Air3 version

15 months agotile: update index policy url
Grant Slater [Fri, 16 Aug 2019 21:22:24 +0000 (22:22 +0100)]
tile: update index policy url

15 months agobase: sysctl kernel.sched_autogroup_enabled=0
Grant Slater [Fri, 16 Aug 2019 20:24:32 +0000 (21:24 +0100)]
base: sysctl kernel.sched_autogroup_enabled=0

15 months agotilecache: full port range
Grant Slater [Fri, 16 Aug 2019 20:23:35 +0000 (21:23 +0100)]
tilecache: full port range

15 months agotilecache: minimal swapout
Grant Slater [Fri, 16 Aug 2019 20:22:57 +0000 (21:22 +0100)]
tilecache: minimal swapout

15 months agotilecache: increase somaxconn
Grant Slater [Fri, 16 Aug 2019 20:22:03 +0000 (21:22 +0100)]
tilecache: increase somaxconn

15 months agoReduce cache memory limit on azure
Tom Hughes [Thu, 15 Aug 2019 17:52:02 +0000 (18:52 +0100)]
Reduce cache memory limit on azure

15 months agoUse new style loading for cldr extension
Tom Hughes [Thu, 15 Aug 2019 10:01:20 +0000 (11:01 +0100)]
Use new style loading for cldr extension

15 months agoUse new style loading for skins
Tom Hughes [Thu, 15 Aug 2019 09:57:01 +0000 (10:57 +0100)]
Use new style loading for skins

15 months agoUpdate board wiki to 1.33
Tom Hughes [Thu, 15 Aug 2019 09:43:51 +0000 (10:43 +0100)]
Update board wiki to 1.33

15 months agoosqa: set safe WSGIDaemonProcess restart intervals
Grant Slater [Tue, 13 Aug 2019 23:00:38 +0000 (00:00 +0100)]
osqa: set safe WSGIDaemonProcess restart intervals

15 months agoRemove yevaud OOB from DHCP config
Tom Hughes [Sun, 11 Aug 2019 23:07:25 +0000 (00:07 +0100)]
Remove yevaud OOB from DHCP config

15 months agoRemove role for yevaud
Tom Hughes [Sun, 11 Aug 2019 19:30:18 +0000 (20:30 +0100)]
Remove role for yevaud

15 months agoFix interface name for ysera
Tom Hughes [Sun, 11 Aug 2019 19:29:57 +0000 (20:29 +0100)]
Fix interface name for ysera

15 months agoAdd OOB MAC for ysera
Tom Hughes [Sun, 11 Aug 2019 14:57:49 +0000 (15:57 +0100)]
Add OOB MAC for ysera

15 months agoAdd role for ysera
Tom Hughes [Sun, 11 Aug 2019 14:54:52 +0000 (15:54 +0100)]
Add role for ysera

15 months agoUse systemd cookbook to configure cron dropin
Tom Hughes [Thu, 8 Aug 2019 18:04:05 +0000 (19:04 +0100)]
Use systemd cookbook to configure cron dropin

15 months agoMediawiki: use multi-proc job queue. cron cleanups
Grant Slater [Wed, 7 Aug 2019 23:27:39 +0000 (00:27 +0100)]
Mediawiki: use multi-proc job queue. cron cleanups

15 months agoConfigure cron to run in the local timezone of each machine
Tom Hughes [Wed, 7 Aug 2019 20:16:42 +0000 (21:16 +0100)]
Configure cron to run in the local timezone of each machine

15 months agoRemove nano to preserve everybody's sanity
Tom Hughes [Wed, 7 Aug 2019 20:10:51 +0000 (21:10 +0100)]
Remove nano to preserve everybody's sanity

16 months agoAdd timezone information to nodes
Tom Hughes [Sun, 28 Jul 2019 10:08:23 +0000 (11:08 +0100)]
Add timezone information to nodes

16 months agoIncrease cache memory on culebre
Tom Hughes [Fri, 26 Jul 2019 10:53:38 +0000 (11:53 +0100)]
Increase cache memory on culebre

16 months agoUpdate piwik to 3.11.0
Tom Hughes [Wed, 24 Jul 2019 07:15:35 +0000 (08:15 +0100)]
Update piwik to 3.11.0

16 months agoRemvoe cleanup code
Tom Hughes [Mon, 22 Jul 2019 18:19:39 +0000 (19:19 +0100)]
Remvoe cleanup code

16 months agoUpdate forum themes
Tom Hughes [Mon, 22 Jul 2019 18:18:16 +0000 (19:18 +0100)]
Update forum themes

16 months agoRun the rails message delivery script in production mode
Tom Hughes [Wed, 17 Jul 2019 23:21:11 +0000 (00:21 +0100)]
Run the rails message delivery script in production mode

16 months agoRun job processors for the storage queue
Tom Hughes [Mon, 15 Jul 2019 21:22:28 +0000 (22:22 +0100)]
Run job processors for the storage queue

16 months agoDisable IP checks for OTRS sessions
Tom Hughes [Mon, 15 Jul 2019 15:59:16 +0000 (16:59 +0100)]
Disable IP checks for OTRS sessions

16 months agoAlways confgure a local storage service
Tom Hughes [Sun, 14 Jul 2019 18:23:16 +0000 (19:23 +0100)]
Always confgure a local storage service

16 months agoConfigure Active Storage policy for user avatars
Tom Hughes [Sun, 14 Jul 2019 18:02:04 +0000 (19:02 +0100)]
Configure Active Storage policy for user avatars

16 months agoDisable peering for squid 4 caches
Tom Hughes [Thu, 11 Jul 2019 19:31:52 +0000 (20:31 +0100)]
Disable peering for squid 4 caches

16 months agoAdd tile HTTPS address to external image whitelist
Tigerfell [Wed, 10 Jul 2019 09:39:39 +0000 (11:39 +0200)]
Add tile HTTPS address to external image whitelist

Closes #243

16 months agoInstall some additional themes for the forum
Tom Hughes [Tue, 9 Jul 2019 20:14:33 +0000 (21:14 +0100)]
Install some additional themes for the forum

16 months agoExpire archived logs after 180 days
Tom Hughes [Mon, 8 Jul 2019 21:43:28 +0000 (22:43 +0100)]
Expire archived logs after 180 days

16 months agoModify backup expiry script to expire everything when no prefix is given
Tom Hughes [Mon, 8 Jul 2019 21:35:23 +0000 (22:35 +0100)]
Modify backup expiry script to expire everything when no prefix is given

16 months agoFix piwik cron job
Tom Hughes [Sat, 6 Jul 2019 09:53:29 +0000 (10:53 +0100)]
Fix piwik cron job

16 months agoUpdate piwik to 3.10.0
Tom Hughes [Fri, 5 Jul 2019 07:31:41 +0000 (08:31 +0100)]
Update piwik to 3.10.0

16 months agoImagery: no http2 on port 80
Grant Slater [Wed, 3 Jul 2019 21:27:11 +0000 (22:27 +0100)]
Imagery: no http2 on port 80

16 months agoImagery: fix typo on listen
Grant Slater [Wed, 3 Jul 2019 21:14:19 +0000 (22:14 +0100)]
Imagery: fix typo on listen

16 months agoImagery: improved nginx listen + http2
Grant Slater [Wed, 3 Jul 2019 20:57:36 +0000 (21:57 +0100)]
Imagery: improved nginx listen + http2

16 months agoImagery: update leafletjs
Grant Slater [Wed, 3 Jul 2019 20:48:41 +0000 (21:48 +0100)]
Imagery: update leafletjs

16 months agoMerge remote-tracking branch 'github/pull/242'
Tom Hughes [Wed, 3 Jul 2019 17:24:57 +0000 (18:24 +0100)]
Merge remote-tracking branch 'github/pull/242'

16 months agoRemove RRD dumps from Munin server
Matt Amos [Wed, 3 Jul 2019 10:29:50 +0000 (11:29 +0100)]
Remove RRD dumps from Munin server

In #109 we added downloadable RRD dumps, which may or may not have been useful at the time. However, they've been broken for almost a year (since August 2018 by my reckoning) without anyone complaining. Except `cron`, which complains to me daily.

If, as it appears, it's not being used any more, then it seems we might as well turn it off.

16 months agoRun job queue daemons in production mode
Tom Hughes [Tue, 2 Jul 2019 08:25:18 +0000 (09:25 +0100)]
Run job queue daemons in production mode

16 months agoIncrease disk cache size for balerion
Tom Hughes [Sun, 30 Jun 2019 16:54:31 +0000 (17:54 +0100)]
Increase disk cache size for balerion

16 months agoAdd role for balerion
Tom Hughes [Sun, 30 Jun 2019 15:41:49 +0000 (16:41 +0100)]
Add role for balerion

17 months agoAllow local netblocks to access bind as well as known hosts
Tom Hughes [Wed, 26 Jun 2019 17:58:27 +0000 (18:58 +0100)]
Allow local netblocks to access bind as well as known hosts