chef.git
6 years agotilecache: prefer cache siblings, allow caching of response hits
Grant Slater [Thu, 16 Jan 2014 19:25:20 +0000 (19:25 +0000)]
tilecache: prefer cache siblings, allow caching of response hits

6 years agotilecache: add best peers to each cache (based on avg ping latency)
Grant Slater [Thu, 16 Jan 2014 19:04:23 +0000 (19:04 +0000)]
tilecache: add best peers to each cache (based on avg ping latency)

6 years agotilecache: tweak scraper regex
Grant Slater [Thu, 16 Jan 2014 14:40:13 +0000 (14:40 +0000)]
tilecache: tweak scraper regex

6 years agotilecache: block heavy scrapers.
Grant Slater [Thu, 16 Jan 2014 14:28:20 +0000 (14:28 +0000)]
tilecache: block heavy scrapers.

6 years agotile: ensure ttf-dejavu + ttf-unifont packages are installed
Grant Slater [Tue, 14 Jan 2014 11:20:44 +0000 (11:20 +0000)]
tile: ensure ttf-dejavu + ttf-unifont packages are installed

6 years agoReduce tile expiry cutoff time to 28 days
Tom Hughes [Tue, 14 Jan 2014 09:15:23 +0000 (09:15 +0000)]
Reduce tile expiry cutoff time to 28 days

6 years agotilecache: use xz for logrotate
Grant Slater [Sat, 11 Jan 2014 15:48:30 +0000 (15:48 +0000)]
tilecache: use xz for logrotate

6 years agoUpdate carto stylesheet to v2.8.0
Tom Hughes [Thu, 9 Jan 2014 17:55:59 +0000 (17:55 +0000)]
Update carto stylesheet to v2.8.0

6 years agotilecache: compress immediately on logrotate
Grant Slater [Wed, 8 Jan 2014 00:55:10 +0000 (00:55 +0000)]
tilecache: compress immediately on logrotate

6 years agoSet correct wiki backup prefix for cleanup script
Grant Slater [Mon, 6 Jan 2014 16:32:11 +0000 (16:32 +0000)]
Set correct wiki backup prefix for cleanup script

6 years agotilecache: nginx pass client IP
Grant Slater [Sun, 5 Jan 2014 02:52:08 +0000 (02:52 +0000)]
tilecache: nginx pass client IP

6 years agossl: tile.openstreetmap.org public cert add trust chain
Grant Slater [Sun, 5 Jan 2014 02:28:31 +0000 (02:28 +0000)]
ssl: tile.openstreetmap.org public cert add trust chain

6 years agonginx: restart on site config change
Grant Slater [Sun, 5 Jan 2014 02:02:11 +0000 (02:02 +0000)]
nginx: restart on site config change

6 years agonginx: enable but do not immediately restart
Grant Slater [Sun, 5 Jan 2014 02:00:50 +0000 (02:00 +0000)]
nginx: enable but do not immediately restart

6 years agotilecache: nginx tweak
Grant Slater [Sun, 5 Jan 2014 01:40:35 +0000 (01:40 +0000)]
tilecache: nginx tweak

6 years agotilecache: minor cleanup
Grant Slater [Sun, 5 Jan 2014 01:35:51 +0000 (01:35 +0000)]
tilecache: minor cleanup

6 years agotilecache: add nginx dependency
Grant Slater [Sun, 5 Jan 2014 01:25:35 +0000 (01:25 +0000)]
tilecache: add nginx dependency

6 years agotilecache: add basic nginx ssl configuration
Grant Slater [Sun, 5 Jan 2014 01:21:58 +0000 (01:21 +0000)]
tilecache: add basic nginx ssl configuration

6 years agoMove tile cache sibling configuration to roles
Tom Hughes [Thu, 2 Jan 2014 19:04:13 +0000 (19:04 +0000)]
Move tile cache sibling configuration to roles

6 years agotilecache: proxy-only hot-wired peers
Grant Slater [Thu, 2 Jan 2014 18:48:58 +0000 (18:48 +0000)]
tilecache: proxy-only hot-wired peers

6 years agoWeb: add additional alias + problem 3rd party alias
Grant Slater [Wed, 1 Jan 2014 20:57:35 +0000 (20:57 +0000)]
Web: add additional alias + problem 3rd party alias

6 years agodev: increase PHP upload max to 32MB
Grant Slater [Mon, 30 Dec 2013 22:40:54 +0000 (22:40 +0000)]
dev: increase PHP upload max to 32MB

6 years agoSet NOKOGIRI_USE_SYSTEM_LIBRARIES while instailling the rails bundle
Tom Hughes [Fri, 20 Dec 2013 09:06:10 +0000 (09:06 +0000)]
Set NOKOGIRI_USE_SYSTEM_LIBRARIES while instailling the rails bundle

6 years agoAdd role for simurgh
Tom Hughes [Thu, 19 Dec 2013 13:04:47 +0000 (13:04 +0000)]
Add role for simurgh

6 years agoUpdate chef client to 11.8.2
Tom Hughes [Thu, 19 Dec 2013 13:03:34 +0000 (13:03 +0000)]
Update chef client to 11.8.2

6 years agoTilecache: breakout render parents to avoid squid roundrobin DNS issue
Grant Slater [Wed, 18 Dec 2013 12:59:11 +0000 (12:59 +0000)]
Tilecache: breakout render parents to avoid squid roundrobin DNS issue

6 years agoRevert "Tilecache: breakout render parents to avoid squid roundrobin DNS issue"
Grant Slater [Wed, 18 Dec 2013 12:25:23 +0000 (12:25 +0000)]
Revert "Tilecache: breakout render parents to avoid squid roundrobin DNS issue"

This reverts commit 9dce3290df98d37eafe424fee505bde9a7384862.

6 years agoTilecache: breakout render parents to avoid squid roundrobin DNS issue
Grant Slater [Wed, 18 Dec 2013 12:24:07 +0000 (12:24 +0000)]
Tilecache: breakout render parents to avoid squid roundrobin DNS issue

6 years agotilecache: additional path blacklist
Grant Slater [Tue, 17 Dec 2013 16:57:16 +0000 (16:57 +0000)]
tilecache: additional path blacklist

6 years agotilecache: Add path whitelist + blacklist to avoid false positive IDS @ ISP
Grant Slater [Tue, 17 Dec 2013 15:56:34 +0000 (15:56 +0000)]
tilecache: Add path whitelist + blacklist to avoid false positive IDS @ ISP

6 years agoMove readonly database traffic to katla
Tom Hughes [Thu, 12 Dec 2013 10:16:18 +0000 (10:16 +0000)]
Move readonly database traffic to katla

6 years agoRevert "Move readonly database traffic to katla"
Tom Hughes [Thu, 12 Dec 2013 15:39:59 +0000 (15:39 +0000)]
Revert "Move readonly database traffic to katla"

This reverts commit e1bad7cf91c5b6ac6b435d2489b55ab86b165d9a.

6 years agoMove readonly database traffic to katla
Tom Hughes [Thu, 12 Dec 2013 10:16:18 +0000 (10:16 +0000)]
Move readonly database traffic to katla

6 years agoUpdate carto stylesheets to v2.7.0
Tom Hughes [Wed, 11 Dec 2013 00:06:56 +0000 (00:06 +0000)]
Update carto stylesheets to v2.7.0

6 years agofix log file ownership
Sarah Hoffmann [Sun, 8 Dec 2013 08:19:57 +0000 (09:19 +0100)]
fix log file ownership

6 years agopoldi: tweak md sync (check) performance to lower impact on machine
Grant Slater [Thu, 5 Dec 2013 10:36:33 +0000 (10:36 +0000)]
poldi: tweak md sync (check) performance to lower impact on machine

6 years agoondemand freq scaling: Slower down sampling (100)
Grant Slater [Tue, 3 Dec 2013 13:42:50 +0000 (13:42 +0000)]
ondemand freq scaling: Slower down sampling (100)

6 years agoMove backup authentication rules to the db-backup role
Tom Hughes [Tue, 3 Dec 2013 09:55:43 +0000 (09:55 +0000)]
Move backup authentication rules to the db-backup role

6 years agoAdd the db-backup role to katla
Tom Hughes [Tue, 3 Dec 2013 09:46:53 +0000 (09:46 +0000)]
Add the db-backup role to katla

6 years agoDrop help.apis.dev.openstreetmap.org
Tom Hughes [Tue, 3 Dec 2013 09:18:43 +0000 (09:18 +0000)]
Drop help.apis.dev.openstreetmap.org

6 years agoDrop redesign.apis.dev.openstreetmap.org
Tom Hughes [Tue, 3 Dec 2013 08:26:07 +0000 (08:26 +0000)]
Drop redesign.apis.dev.openstreetmap.org

6 years agologrotation for nominatim
Sarah Hoffmann [Tue, 3 Dec 2013 08:00:40 +0000 (09:00 +0100)]
logrotation for nominatim

6 years agoondemand frequency scaling: slower down sampling
Grant Slater [Mon, 2 Dec 2013 11:01:48 +0000 (11:01 +0000)]
ondemand frequency scaling: slower down sampling

6 years agoValidate sysfs settings on each chef run
Tom Hughes [Mon, 2 Dec 2013 09:37:21 +0000 (09:37 +0000)]
Validate sysfs settings on each chef run

6 years agoUpdate SSL cipher suites to latest recomendations
Tom Hughes [Sat, 30 Nov 2013 15:55:55 +0000 (15:55 +0000)]
Update SSL cipher suites to latest recomendations

6 years agoAllow katla to fetch WALK logs from ramoth
Tom Hughes [Fri, 29 Nov 2013 14:09:59 +0000 (14:09 +0000)]
Allow katla to fetch WALK logs from ramoth

6 years agoTweak disks a bit more on katla
Tom Hughes [Thu, 28 Nov 2013 21:01:21 +0000 (21:01 +0000)]
Tweak disks a bit more on katla

6 years agoAllow katla to make replication connections to ramoth
Tom Hughes [Thu, 28 Nov 2013 18:25:09 +0000 (18:25 +0000)]
Allow katla to make replication connections to ramoth

6 years agoAdjust postgres archive path
Tom Hughes [Thu, 28 Nov 2013 18:22:38 +0000 (18:22 +0000)]
Adjust postgres archive path

6 years agoConfigure katla as a database slave
Tom Hughes [Thu, 28 Nov 2013 18:02:52 +0000 (18:02 +0000)]
Configure katla as a database slave

6 years agoDisable SMTP callout verification for telenav.com senders
Tom Hughes [Thu, 28 Nov 2013 00:27:41 +0000 (00:27 +0000)]
Disable SMTP callout verification for telenav.com senders

The telenav.com servers return 550 for any attempt to deliver mail
when the sender address is null, which leads to all mail from them
being rejected due to a failed sender verification.

6 years agoRevert "Go readonly on smaug"
Tom Hughes [Wed, 27 Nov 2013 19:18:42 +0000 (19:18 +0000)]
Revert "Go readonly on smaug"

This reverts commit a5a304af4155b480952d2b39de82d9050e443f46.

6 years agoGo readonly on smaug
Tom Hughes [Wed, 27 Nov 2013 17:24:39 +0000 (17:24 +0000)]
Go readonly on smaug

6 years agoUpdate ssh host keys for spike-{01,02,03} oob cards
Tom Hughes [Wed, 27 Nov 2013 17:21:51 +0000 (17:21 +0000)]
Update ssh host keys for spike-{01,02,03} oob cards

6 years agocgiirc: add #osrm
Grant Slater [Mon, 25 Nov 2013 20:22:09 +0000 (20:22 +0000)]
cgiirc: add #osrm

6 years agoSpecify hardware addresses for spike-{01,02,03}
Tom Hughes [Mon, 25 Nov 2013 15:02:36 +0000 (15:02 +0000)]
Specify hardware addresses for spike-{01,02,03}

6 years agoConvert munin_plugin and munin_plugin_conf to LWRPs
Tom Hughes [Sun, 24 Nov 2013 22:46:45 +0000 (22:46 +0000)]
Convert munin_plugin and munin_plugin_conf to LWRPs

6 years agoImprove idempotency of apache_module
Tom Hughes [Sun, 24 Nov 2013 18:07:50 +0000 (18:07 +0000)]
Improve idempotency of apache_module

6 years agoConvert apache_module to an LWRP
Tom Hughes [Sun, 24 Nov 2013 17:35:34 +0000 (17:35 +0000)]
Convert apache_module to an LWRP

6 years agoFix comments
Tom Hughes [Sun, 24 Nov 2013 11:27:14 +0000 (11:27 +0000)]
Fix comments

6 years agoReimplement edit_file using Chef::DelayedEvaluator
Tom Hughes [Sun, 24 Nov 2013 11:21:34 +0000 (11:21 +0000)]
Reimplement edit_file using Chef::DelayedEvaluator

6 years agoMake sure @directory is set properly in apache site templates
Tom Hughes [Sun, 24 Nov 2013 10:56:16 +0000 (10:56 +0000)]
Make sure @directory is set properly in apache site templates

6 years agoMake deferring of edit_file work properly
Tom Hughes [Sun, 24 Nov 2013 10:36:50 +0000 (10:36 +0000)]
Make deferring of edit_file work properly

6 years agoMake edit_file work again
Tom Hughes [Sat, 23 Nov 2013 20:44:12 +0000 (20:44 +0000)]
Make edit_file work again

6 years agoRevert "Make an EditedFile look like a string"
Tom Hughes [Sat, 23 Nov 2013 20:14:48 +0000 (20:14 +0000)]
Revert "Make an EditedFile look like a string"

This reverts commit 0926c262c75576e52af45ef9b247805a6619aef2.

6 years agoMake an EditedFile look like a string
Tom Hughes [Sat, 23 Nov 2013 20:12:58 +0000 (20:12 +0000)]
Make an EditedFile look like a string

6 years agoCorrect method name
Tom Hughes [Sat, 23 Nov 2013 17:55:41 +0000 (17:55 +0000)]
Correct method name

6 years agoWe want ::File here not Chef::Provider::File
Tom Hughes [Sat, 23 Nov 2013 17:53:53 +0000 (17:53 +0000)]
We want ::File here not Chef::Provider::File

6 years agoUse README.md for the long_description
Tom Hughes [Sat, 23 Nov 2013 17:51:28 +0000 (17:51 +0000)]
Use README.md for the long_description

6 years agoConvert apache_site to an LWRP
Tom Hughes [Sat, 23 Nov 2013 17:47:08 +0000 (17:47 +0000)]
Convert apache_site to an LWRP

6 years agoDon't use ||= in attributes files as it doesn't work
Tom Hughes [Sat, 23 Nov 2013 17:00:11 +0000 (17:00 +0000)]
Don't use ||= in attributes files as it doesn't work

6 years agoFix some foodcritic style warnings
Tom Hughes [Sat, 23 Nov 2013 12:59:16 +0000 (12:59 +0000)]
Fix some foodcritic style warnings

6 years agoRemove unnecessary string interpolation
Tom Hughes [Sat, 23 Nov 2013 12:44:51 +0000 (12:44 +0000)]
Remove unnecessary string interpolation

6 years agoConvert all README filess to markdown
Tom Hughes [Sat, 23 Nov 2013 12:44:18 +0000 (12:44 +0000)]
Convert all README filess to markdown

6 years agoSpecify name explicitly in cookbook metadata files
Tom Hughes [Sat, 23 Nov 2013 12:17:54 +0000 (12:17 +0000)]
Specify name explicitly in cookbook metadata files

6 years agoAvoid shelling out to sysctl when we can read /proc/sys
Tom Hughes [Sat, 23 Nov 2013 12:13:18 +0000 (12:13 +0000)]
Avoid shelling out to sysctl when we can read /proc/sys

6 years agoConvert all notify/subscribe calls to the new style syntax
Tom Hughes [Sat, 23 Nov 2013 12:04:41 +0000 (12:04 +0000)]
Convert all notify/subscribe calls to the new style syntax

6 years agoDefer evaluation of an edited file's contents
Tom Hughes [Sat, 23 Nov 2013 11:48:42 +0000 (11:48 +0000)]
Defer evaluation of an edited file's contents

We want to make sure we don't build the contents until the resource
is asctually being run, as it may rely on template files installed by
a previous resource.

6 years agoUpgrade chef client to 11.8.0
Tom Hughes [Sat, 23 Nov 2013 11:14:32 +0000 (11:14 +0000)]
Upgrade chef client to 11.8.0

6 years agoReplace content_from_file extension with simpler edit_file technique
Tom Hughes [Sat, 23 Nov 2013 00:23:36 +0000 (00:23 +0000)]
Replace content_from_file extension with simpler edit_file technique

6 years agoMove chef extensions/patches to the chef cookbook
Tom Hughes [Sat, 23 Nov 2013 00:08:02 +0000 (00:08 +0000)]
Move chef extensions/patches to the chef cookbook

6 years agoFix some correctness issues identified by foodcritic
Tom Hughes [Fri, 22 Nov 2013 22:49:01 +0000 (22:49 +0000)]
Fix some correctness issues identified by foodcritic

6 years agoRevert "Go readonly on smaug"
Tom Hughes [Fri, 22 Nov 2013 07:06:48 +0000 (07:06 +0000)]
Revert "Go readonly on smaug"

This reverts commit e8829e9d10c5d3f578998a0c02950c3bf0d37f71.

6 years agoGo readonly on smaug
Grant Slater [Fri, 22 Nov 2013 02:28:35 +0000 (02:28 +0000)]
Go readonly on smaug

6 years agoEnable wp-fail2ban after installing it
Tom Hughes [Thu, 21 Nov 2013 21:35:46 +0000 (21:35 +0000)]
Enable wp-fail2ban after installing it

6 years agoApply fail2ban to wordpress
Tom Hughes [Wed, 20 Nov 2013 21:08:15 +0000 (21:08 +0000)]
Apply fail2ban to wordpress

6 years agoSetup fail2ban everywhere
Tom Hughes [Mon, 18 Nov 2013 21:12:48 +0000 (21:12 +0000)]
Setup fail2ban everywhere

6 years agoIncrease the size of the memcache store on the web backends
Tom Hughes [Thu, 14 Nov 2013 21:48:59 +0000 (21:48 +0000)]
Increase the size of the memcache store on the web backends

6 years agoStop tile cleanup locks being considered stalfe after an hour
Tom Hughes [Tue, 12 Nov 2013 18:55:48 +0000 (18:55 +0000)]
Stop tile cleanup locks being considered stalfe after an hour

6 years agoAdd IPv6 address for jakelong
Tom Hughes [Sat, 9 Nov 2013 12:21:53 +0000 (12:21 +0000)]
Add IPv6 address for jakelong

6 years agoPurge unused whoopsie daemon from all servers
Grant Slater [Sat, 9 Nov 2013 02:48:42 +0000 (02:48 +0000)]
Purge unused whoopsie daemon from all servers

Whoopsie is a crash reporting daemon. Whoopsie is installed with Ubuntu Desktop installs and is unneeded on servers. (crash reports are not submitted without desktop prompt)

6 years agoUpdate carto stylesheets to v2.6.0
Tom Hughes [Wed, 6 Nov 2013 23:04:27 +0000 (23:04 +0000)]
Update carto stylesheets to v2.6.0

6 years agoOnly report RAID failures once every day
Tom Hughes [Wed, 6 Nov 2013 18:42:53 +0000 (18:42 +0000)]
Only report RAID failures once every day

6 years agoOnly monitor the first cciss device on each controller
Tom Hughes [Wed, 6 Nov 2013 18:39:37 +0000 (18:39 +0000)]
Only monitor the first cciss device on each controller

6 years agoDisable mptsas status reporting for now
Tom Hughes [Wed, 6 Nov 2013 18:36:36 +0000 (18:36 +0000)]
Disable mptsas status reporting for now

The only machine we have with such a controller doesn't have any
disks attached to it, which causes bogus status updates.

6 years agoMonitor all HP RAID volumes
Tom Hughes [Wed, 6 Nov 2013 11:35:00 +0000 (11:35 +0000)]
Monitor all HP RAID volumes

6 years agoAvoid repeated purge/install cycles for hpacucli
Tom Hughes [Wed, 6 Nov 2013 10:41:54 +0000 (10:41 +0000)]
Avoid repeated purge/install cycles for hpacucli

6 years agoHandle hpsa based RAID on newer HP machines
Tom Hughes [Wed, 6 Nov 2013 10:13:12 +0000 (10:13 +0000)]
Handle hpsa based RAID on newer HP machines

6 years agoMore work on automatic installation of raid tools
Tom Hughes [Wed, 6 Nov 2013 00:45:50 +0000 (00:45 +0000)]
More work on automatic installation of raid tools

6 years agoInstall raid tools for MegaRAID and AACRaid cards
Tom Hughes [Tue, 5 Nov 2013 23:00:40 +0000 (23:00 +0000)]
Install raid tools for MegaRAID and AACRaid cards