chef.git
10 months agoBase: switch to BBR for Congestion Control
Grant Slater [Fri, 3 Jan 2020 18:59:53 +0000 (18:59 +0000)]
Base: switch to BBR for Congestion Control

10 months agoReduce memory cache size on culebre
Tom Hughes [Fri, 3 Jan 2020 18:26:02 +0000 (18:26 +0000)]
Reduce memory cache size on culebre

10 months agoFix culebre squid memory
Grant Slater [Fri, 3 Jan 2020 18:08:12 +0000 (18:08 +0000)]
Fix culebre squid memory

10 months agochrony: restart chrony on-failure
Grant Slater [Fri, 3 Jan 2020 16:06:15 +0000 (16:06 +0000)]
chrony: restart chrony on-failure

10 months agochrony: Enable hw timestamps if available
Grant Slater [Fri, 3 Jan 2020 16:05:23 +0000 (16:05 +0000)]
chrony: Enable hw timestamps if available

10 months agochrony: Add initstepslew + cloudflare/google fallback
Grant Slater [Fri, 3 Jan 2020 16:00:58 +0000 (16:00 +0000)]
chrony: Add initstepslew + cloudflare/google fallback

10 months agonominatim: switch to full extratags style
Sarah Hoffmann [Fri, 3 Jan 2020 09:39:18 +0000 (10:39 +0100)]
nominatim: switch to full extratags style

10 months agoReduce memory cache limit on noomoahk
Tom Hughes [Fri, 3 Jan 2020 13:36:06 +0000 (13:36 +0000)]
Reduce memory cache limit on noomoahk

10 months agoput pummelzacken in import mode
Sarah Hoffmann [Fri, 3 Jan 2020 09:35:55 +0000 (10:35 +0100)]
put pummelzacken in import mode

10 months agoRemove squid upgrade logic
Tom Hughes [Fri, 3 Jan 2020 00:08:37 +0000 (00:08 +0000)]
Remove squid upgrade logic

10 months agoFix some incorrect regional ntp pool addresses
Tom Hughes [Thu, 2 Jan 2020 21:20:40 +0000 (21:20 +0000)]
Fix some incorrect regional ntp pool addresses

11 months agoConfigure path to GeoLite2 database for rails
Tom Hughes [Wed, 1 Jan 2020 18:47:04 +0000 (18:47 +0000)]
Configure path to GeoLite2 database for rails

11 months agoInstall GeoLite2 databases on rails machines
Tom Hughes [Wed, 1 Jan 2020 18:41:19 +0000 (18:41 +0000)]
Install GeoLite2 databases on rails machines

11 months agoDrop forced upgrade of geoipupdate
Tom Hughes [Wed, 1 Jan 2020 16:47:53 +0000 (16:47 +0000)]
Drop forced upgrade of geoipupdate

11 months agoUse MaxMind PPA for geoipupdate and configure account credentials
Tom Hughes [Wed, 1 Jan 2020 16:13:34 +0000 (16:13 +0000)]
Use MaxMind PPA for geoipupdate and configure account credentials

11 months agoForce upgrade of squid to 4.9 on tile caches
Tom Hughes [Wed, 1 Jan 2020 14:05:15 +0000 (14:05 +0000)]
Force upgrade of squid to 4.9 on tile caches

11 months agoput pummelzacken back in production mode
Sarah Hoffmann [Sat, 28 Dec 2019 08:25:25 +0000 (09:25 +0100)]
put pummelzacken back in production mode

11 months agoVersion bump civicrm mailchimp
Guillaume RISCHARD [Thu, 26 Dec 2019 21:23:55 +0000 (22:23 +0100)]
Version bump civicrm mailchimp

11 months agoVersion bump
Guillaume RISCHARD [Thu, 26 Dec 2019 20:25:54 +0000 (21:25 +0100)]
Version bump

11 months agoCiviCRM version: take a step back to leap forward
Guillaume RISCHARD [Thu, 26 Dec 2019 19:56:11 +0000 (20:56 +0100)]
CiviCRM version: take a step back to leap forward

11 months agoVersion bump and uninstall stripe (unused)
Guillaume RISCHARD [Thu, 26 Dec 2019 18:40:41 +0000 (19:40 +0100)]
Version bump and uninstall stripe (unused)

11 months agoSwitch default qdisc to fq
Grant Slater [Mon, 23 Dec 2019 16:52:43 +0000 (16:52 +0000)]
Switch default qdisc to fq

11 months agomunin: standard indenting in apache config (style only)
Grant Slater [Mon, 23 Dec 2019 16:01:49 +0000 (16:01 +0000)]
munin: standard indenting in apache config (style only)

11 months agoudev tune DELL PERC H710 scheduler
Grant Slater [Mon, 23 Dec 2019 15:59:13 +0000 (15:59 +0000)]
udev tune DELL PERC H710 scheduler

11 months agotile: Use TCP BBR congestion control
Grant Slater [Mon, 23 Dec 2019 13:25:40 +0000 (13:25 +0000)]
tile: Use TCP BBR congestion control

11 months agotilecache: Use TCP BBR congestion control
Grant Slater [Mon, 23 Dec 2019 13:15:14 +0000 (13:15 +0000)]
tilecache: Use TCP BBR congestion control

11 months agopummelzacken: increase effective_io_concurrency
Sarah Hoffmann [Sun, 22 Dec 2019 16:12:53 +0000 (17:12 +0100)]
pummelzacken: increase effective_io_concurrency

11 months agoswitch postgresql to 12 on pummelzacken
Sarah Hoffmann [Sun, 22 Dec 2019 15:49:48 +0000 (16:49 +0100)]
switch postgresql to 12 on pummelzacken

11 months agoput pummelzacken in import mode
Sarah Hoffmann [Sun, 22 Dec 2019 15:44:45 +0000 (16:44 +0100)]
put pummelzacken in import mode

11 months agotilecache: disable TCP slow start
Grant Slater [Fri, 20 Dec 2019 17:04:34 +0000 (17:04 +0000)]
tilecache: disable TCP slow start

11 months agoReplace dnsbl-3.uceprotect.net with dnsbl-2.uceprotect.net
Tom Hughes [Thu, 12 Dec 2019 15:45:22 +0000 (15:45 +0000)]
Replace dnsbl-3.uceprotect.net with dnsbl-2.uceprotect.net

11 months agoAdd use noop scheduler for OCZ-VERTEX3
Grant Slater [Mon, 9 Dec 2019 22:35:30 +0000 (22:35 +0000)]
Add use noop scheduler for OCZ-VERTEX3

11 months agostateofthemap: add reasonable expiry headers
Grant Slater [Sun, 8 Dec 2019 20:26:03 +0000 (20:26 +0000)]
stateofthemap: add reasonable expiry headers

11 months agoswitch2osm: add expiry matching github pages
Grant Slater [Sun, 8 Dec 2019 19:51:49 +0000 (19:51 +0000)]
switch2osm: add expiry matching github pages

11 months agoimagery: return cache status
Grant Slater [Sun, 8 Dec 2019 19:37:21 +0000 (19:37 +0000)]
imagery: return cache status

11 months agoimagery: backport nginx caching improvements
Grant Slater [Sun, 8 Dec 2019 19:13:05 +0000 (19:13 +0000)]
imagery: backport nginx caching improvements

11 months agoimagery: use nginx tcp_nopush default
Grant Slater [Sun, 8 Dec 2019 18:58:17 +0000 (18:58 +0000)]
imagery: use nginx tcp_nopush default

11 months agotilecache: Use full local port range
Grant Slater [Sun, 8 Dec 2019 18:52:43 +0000 (18:52 +0000)]
tilecache: Use full local port range

11 months agotilecache: use conditional validation upstream
Grant Slater [Sun, 8 Dec 2019 18:52:13 +0000 (18:52 +0000)]
tilecache: use conditional validation upstream

11 months agoIncrease some tilecaches nginx cache
Grant Slater [Sun, 8 Dec 2019 16:23:16 +0000 (16:23 +0000)]
Increase some tilecaches nginx cache

11 months agoAdd additional emails to .mailmap
Grant Slater [Sun, 8 Dec 2019 15:45:39 +0000 (15:45 +0000)]
Add additional emails to .mailmap

11 months agotilecache: proxy buffer large enough for full tile
Grant Slater [Sat, 7 Dec 2019 18:42:08 +0000 (18:42 +0000)]
tilecache: proxy buffer large enough for full tile

11 months agotilecache: switch nginx upstream to squid port 8080
Grant Slater [Sat, 7 Dec 2019 18:40:40 +0000 (18:40 +0000)]
tilecache: switch nginx upstream to squid port 8080

11 months agoConfigure weighted plugin for gdnsd
Tom Hughes [Fri, 6 Dec 2019 09:18:12 +0000 (09:18 +0000)]
Configure weighted plugin for gdnsd

11 months agoEnable SNMP access to naga
Tom Hughes [Wed, 4 Dec 2019 10:13:52 +0000 (10:13 +0000)]
Enable SNMP access to naga

11 months agosquid: use a short shutdown_lifetime
Grant Slater [Tue, 3 Dec 2019 23:28:21 +0000 (23:28 +0000)]
squid: use a short shutdown_lifetime

11 months agosquid: use systemd killmode mixed
Grant Slater [Tue, 3 Dec 2019 22:25:48 +0000 (22:25 +0000)]
squid: use systemd killmode mixed

Move closer to upstream systemd config
See: https://github.com/squid-cache/squid/commit/d00e0e6d26acbd4c0c5e7b51f6b2900513282456#diff-d29c313433f1723d0bdd9664221014db

11 months agosystemd: add killmode support
Grant Slater [Tue, 3 Dec 2019 22:23:48 +0000 (22:23 +0000)]
systemd: add killmode support

11 months agoAdd role for naga
Tom Hughes [Tue, 3 Dec 2019 19:24:19 +0000 (19:24 +0000)]
Add role for naga

11 months agoRemove unused role
Tom Hughes [Tue, 3 Dec 2019 19:16:30 +0000 (19:16 +0000)]
Remove unused role

12 months agontp: allow large steps on VMs
Grant Slater [Mon, 2 Dec 2019 20:00:23 +0000 (20:00 +0000)]
ntp: allow large steps on VMs

12 months agontp: allow anytime time step on VMs
Grant Slater [Mon, 2 Dec 2019 16:26:32 +0000 (16:26 +0000)]
ntp: allow anytime time step on VMs

12 months agotimesync - fix action typo
Grant Slater [Sun, 1 Dec 2019 17:27:14 +0000 (17:27 +0000)]
timesync - fix action typo

12 months agoForceful open-vm-tools timeSync disable
Grant Slater [Sun, 1 Dec 2019 17:22:21 +0000 (17:22 +0000)]
Forceful open-vm-tools timeSync disable

12 months agoDisable host time sync on VMware guests
Grant Slater [Sun, 1 Dec 2019 16:57:40 +0000 (16:57 +0000)]
Disable host time sync on VMware guests

12 months agosupybot: add switch2osm
Grant Slater [Sun, 1 Dec 2019 16:27:29 +0000 (16:27 +0000)]
supybot: add switch2osm

12 months agoserverinfo: fix copy/paste error
Grant Slater [Sun, 1 Dec 2019 16:18:18 +0000 (16:18 +0000)]
serverinfo: fix copy/paste error

12 months agoserverinfo: Use bundler to run jekyll
Grant Slater [Sun, 1 Dec 2019 16:14:22 +0000 (16:14 +0000)]
serverinfo: Use bundler to run jekyll

12 months agoInstall open-vm-tools on VMware guests
Grant Slater [Sun, 1 Dec 2019 15:51:38 +0000 (15:51 +0000)]
Install open-vm-tools on VMware guests

12 months agonominatim: keep update logs for a year
Sarah Hoffmann [Sun, 1 Dec 2019 14:53:25 +0000 (15:53 +0100)]
nominatim: keep update logs for a year

12 months agoswitch2osm: add 404 handler page
Grant Slater [Thu, 28 Nov 2019 00:36:01 +0000 (00:36 +0000)]
switch2osm: add 404 handler page

12 months agoRevert "switch2osm: add temporary workaround until for missing config"
Grant Slater [Thu, 28 Nov 2019 00:21:34 +0000 (00:21 +0000)]
Revert "switch2osm: add temporary workaround until for missing config"

This reverts commit 7a3a01f710421e67b96dfebd5a51c4374be73035.

12 months agoUpdate piwik to 3.13.0
Tom Hughes [Thu, 28 Nov 2019 00:18:02 +0000 (00:18 +0000)]
Update piwik to 3.13.0

12 months agoswitch2osm: add temporary workaround until for missing config
Grant Slater [Wed, 27 Nov 2019 23:45:09 +0000 (23:45 +0000)]
switch2osm: add temporary workaround until for missing config

12 months agoswitch2osm: use override config to fix site name
Grant Slater [Wed, 27 Nov 2019 23:37:37 +0000 (23:37 +0000)]
switch2osm: use override config to fix site name

12 months agoSwitch 2 new switch2osm.org site
Grant Slater [Wed, 27 Nov 2019 22:42:36 +0000 (22:42 +0000)]
Switch 2 new switch2osm.org site

12 months agoUpdate virtio_blk udev with note
Grant Slater [Wed, 27 Nov 2019 18:32:55 +0000 (18:32 +0000)]
Update virtio_blk udev with note

12 months agoFix device model for VMware
Grant Slater [Wed, 27 Nov 2019 18:20:56 +0000 (18:20 +0000)]
Fix device model for VMware

12 months agoTune scheduler and read_ahead_kb on VMware and KVM
Grant Slater [Wed, 27 Nov 2019 17:55:18 +0000 (17:55 +0000)]
Tune scheduler and read_ahead_kb on VMware and KVM

12 months agoUpdate cookstyle todo
Tom Hughes [Tue, 26 Nov 2019 22:25:36 +0000 (22:25 +0000)]
Update cookstyle todo

12 months agoFix cookstyle warning
Tom Hughes [Tue, 26 Nov 2019 22:21:53 +0000 (22:21 +0000)]
Fix cookstyle warning

12 months agoUpdate bundle
Tom Hughes [Tue, 26 Nov 2019 22:19:47 +0000 (22:19 +0000)]
Update bundle

12 months agolongma: move squid completely to new disk
Grant Slater [Tue, 26 Nov 2019 09:39:26 +0000 (09:39 +0000)]
longma: move squid completely to new disk

12 months agolongma: use new store.new-san mount
Grant Slater [Tue, 26 Nov 2019 00:47:16 +0000 (00:47 +0000)]
longma: use new store.new-san mount

12 months agosquid: make version 4 default
Grant Slater [Tue, 26 Nov 2019 00:40:22 +0000 (00:40 +0000)]
squid: make version 4 default

12 months agoRevert "tilecache: Use squid standby connections"
Grant Slater [Mon, 25 Nov 2019 23:07:44 +0000 (23:07 +0000)]
Revert "tilecache: Use squid standby connections"

This reverts commit 2cd52dc46c86cc311b6961163708a771ea4e30ef.

12 months agosquid: also listen on secondary port 8080
Grant Slater [Mon, 25 Nov 2019 22:26:29 +0000 (22:26 +0000)]
squid: also listen on secondary port 8080

12 months agotilecache: tweak squid refresh_pattern
Grant Slater [Mon, 25 Nov 2019 22:22:04 +0000 (22:22 +0000)]
tilecache: tweak squid refresh_pattern

12 months agotilecache: allow nginx to fallback to other caches
Grant Slater [Mon, 25 Nov 2019 22:19:11 +0000 (22:19 +0000)]
tilecache: allow nginx to fallback to other caches

12 months agosquid: force restart on config change. Reload unsafe
Grant Slater [Mon, 25 Nov 2019 22:17:12 +0000 (22:17 +0000)]
squid: force restart on config change. Reload unsafe

12 months agosquid: tune number workers cpu
Grant Slater [Mon, 25 Nov 2019 21:08:23 +0000 (21:08 +0000)]
squid: tune number workers cpu

12 months agosquid: use manager port mgr:counters
Grant Slater [Mon, 25 Nov 2019 20:47:48 +0000 (20:47 +0000)]
squid: use manager port mgr:counters

12 months agoAdd units to dns_packet_max directive
Tom Hughes [Mon, 25 Nov 2019 07:06:36 +0000 (07:06 +0000)]
Add units to dns_packet_max directive

12 months agoAllow AF_INET6 for squid
Tom Hughes [Sun, 24 Nov 2019 22:35:06 +0000 (22:35 +0000)]
Allow AF_INET6 for squid

12 months agosquid: DNS tuning
Grant Slater [Sun, 24 Nov 2019 22:32:18 +0000 (22:32 +0000)]
squid: DNS tuning

12 months agotilecache: fix limit supported request methods
Grant Slater [Sun, 24 Nov 2019 20:52:24 +0000 (20:52 +0000)]
tilecache: fix limit supported request methods

12 months agotilecache: limit supported request methods
Grant Slater [Sun, 24 Nov 2019 20:44:36 +0000 (20:44 +0000)]
tilecache: limit supported request methods

12 months agoDrop rails6 test site
Tom Hughes [Sun, 24 Nov 2019 19:27:59 +0000 (19:27 +0000)]
Drop rails6 test site

12 months agoAdd a systemd-resolved FallbackDNS list
Grant Slater [Sat, 23 Nov 2019 14:58:04 +0000 (14:58 +0000)]
Add a systemd-resolved FallbackDNS list

The default in systemd for ubuntu in 18.04 is an empty fallback
list.

Use a reasonable list:

* Cloudflare (https://1.1.1.1/)
* Quad9 without filtering (https://www.quad9.net/)
* Google (https://developers.google.com/speed/public-dns/)
1.1.1.1
9.9.9.10
8.8.8.8
2606:4700:4700::1111
2620:fe::10
2001:4860:4860::8888

List from https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/systemd#n103

12 months agoCleanup Dockerfile used for linting
Grant Slater [Sat, 23 Nov 2019 14:56:34 +0000 (14:56 +0000)]
Cleanup Dockerfile used for linting

12 months agoTell browsers they can use stale tiles
Tom Hughes [Fri, 22 Nov 2019 17:06:59 +0000 (17:06 +0000)]
Tell browsers they can use stale tiles

12 months agotilecache: restrict cache control headers to osm.org only
Grant Slater [Fri, 22 Nov 2019 15:53:12 +0000 (15:53 +0000)]
tilecache: restrict cache control headers to osm.org only

12 months agoRevert "tilecache: restrict cache control headers to osm.org only"
Grant Slater [Fri, 22 Nov 2019 15:45:10 +0000 (15:45 +0000)]
Revert "tilecache: restrict cache control headers to osm.org only"

This reverts commit 672db0ffdbfdec5510c282e7eeb2adc30d535111.

12 months agotilecache: restrict cache control headers to osm.org only
Grant Slater [Fri, 22 Nov 2019 15:29:24 +0000 (15:29 +0000)]
tilecache: restrict cache control headers to osm.org only

12 months agotilecache: remove additional cache poisoning header
Grant Slater [Fri, 22 Nov 2019 15:00:13 +0000 (15:00 +0000)]
tilecache: remove additional cache poisoning header

12 months agotilecache: remove cache poisoning headers
Grant Slater [Fri, 22 Nov 2019 14:37:15 +0000 (14:37 +0000)]
tilecache: remove cache poisoning headers

12 months agonominatim: update link to wikipedia data
Sarah Hoffmann [Wed, 20 Nov 2019 11:15:22 +0000 (12:15 +0100)]
nominatim: update link to wikipedia data

12 months agogorynych: use ssd for tilecache
Grant Slater [Tue, 19 Nov 2019 21:04:25 +0000 (21:04 +0000)]
gorynych: use ssd for tilecache

12 months agotilecache: balance localhost backend
Grant Slater [Tue, 19 Nov 2019 20:35:23 +0000 (20:35 +0000)]
tilecache: balance localhost backend

12 months agotilecache: allow TCP tw reuse
Grant Slater [Tue, 19 Nov 2019 20:32:34 +0000 (20:32 +0000)]
tilecache: allow TCP tw reuse