]> git.openstreetmap.org Git - chef.git/log
chef.git
10 months agowordpress: add 2FA key management
Grant Slater [Wed, 28 Jun 2023 15:19:17 +0000 (16:19 +0100)]
wordpress: add 2FA key management

10 months agowordpress: remove custom wp-fail2ban enable
Grant Slater [Wed, 28 Jun 2023 13:30:12 +0000 (14:30 +0100)]
wordpress: remove custom wp-fail2ban enable

10 months agowordpress: use wp-cli for initial DB install and activating plugins
Grant Slater [Tue, 27 Jun 2023 23:21:39 +0000 (00:21 +0100)]
wordpress: use wp-cli for initial DB install and activating plugins

10 months agowordpress: add 2fa and last-login plugins
Grant Slater [Thu, 15 Jun 2023 15:55:40 +0000 (16:55 +0100)]
wordpress: add 2fa and last-login plugins

10 months agopodman: increase startup timeout to not fail on slow container pulls
Grant Slater [Sun, 25 Jun 2023 11:08:23 +0000 (12:08 +0100)]
podman: increase startup timeout to not fail on slow container pulls

10 months agoMerge remote-tracking branch 'github/pull/593'
Tom Hughes [Sun, 25 Jun 2023 10:55:01 +0000 (11:55 +0100)]
Merge remote-tracking branch 'github/pull/593'

10 months agoSpecify DNS server to use for dokken
Grant Slater [Fri, 23 Jun 2023 13:43:04 +0000 (14:43 +0100)]
Specify DNS server to use for dokken

10 months agonominatim: update taginfo information
Sarah Hoffmann [Wed, 21 Jun 2023 08:09:51 +0000 (10:09 +0200)]
nominatim: update taginfo information

10 months agoFix spamassassin tests for Debian
Tom Hughes [Tue, 20 Jun 2023 20:09:39 +0000 (20:09 +0000)]
Fix spamassassin tests for Debian

10 months agoDrop unnecessary include of chef in osmosis recipe
Tom Hughes [Tue, 20 Jun 2023 19:25:23 +0000 (19:25 +0000)]
Drop unnecessary include of chef in osmosis recipe

10 months agoFix spamassassin service name for Debian 12
Tom Hughes [Tue, 20 Jun 2023 18:19:44 +0000 (18:19 +0000)]
Fix spamassassin service name for Debian 12

10 months agoFix typo
Tom Hughes [Tue, 20 Jun 2023 18:19:01 +0000 (19:19 +0100)]
Fix typo

10 months agoUse ruby 3.1 on Debian
Tom Hughes [Tue, 20 Jun 2023 17:46:56 +0000 (17:46 +0000)]
Use ruby 3.1 on Debian

10 months agoUse PHP 8.2 on Debian
Tom Hughes [Tue, 20 Jun 2023 17:42:11 +0000 (17:42 +0000)]
Use PHP 8.2 on Debian

10 months agoMerge remote-tracking branch 'github/pull/590'
Tom Hughes [Tue, 20 Jun 2023 17:39:51 +0000 (18:39 +0100)]
Merge remote-tracking branch 'github/pull/590'

10 months agohardware: remove haveged as unneeded on kernel 5.15 above
Grant Slater [Tue, 20 Jun 2023 15:36:17 +0000 (16:36 +0100)]
hardware: remove haveged as unneeded on kernel 5.15 above

10 months agoapt: allow brief wait for lock
Grant Slater [Tue, 20 Jun 2023 15:35:35 +0000 (16:35 +0100)]
apt: allow brief wait for lock

10 months agoAdd alerts for uplink status
Tom Hughes [Tue, 20 Jun 2023 11:59:37 +0000 (12:59 +0100)]
Add alerts for uplink status

10 months agosyntax
Guillaume RISCHARD [Sun, 18 Jun 2023 11:46:28 +0000 (07:46 -0400)]
syntax

10 months agoDeleted unused layers
Guillaume RISCHARD [Sun, 18 Jun 2023 11:45:17 +0000 (07:45 -0400)]
Deleted unused layers

10 months agoUse ULA addresses for IPv6
Tom Hughes [Thu, 15 Jun 2023 21:35:56 +0000 (21:35 +0000)]
Use ULA addresses for IPv6

10 months agonetworking: install systemd-resolved when required
Grant Slater [Thu, 15 Jun 2023 15:53:45 +0000 (16:53 +0100)]
networking: install systemd-resolved when required

10 months agoSwitch kitchen debian tests to debian-12
Grant Slater [Thu, 15 Jun 2023 15:52:00 +0000 (16:52 +0100)]
Switch kitchen debian tests to debian-12

10 months agoEnable IPv6 in dokken tests
Grant Slater [Thu, 15 Jun 2023 15:49:42 +0000 (16:49 +0100)]
Enable IPv6 in dokken tests

10 months agoReinstate installation of system prometheus package
Tom Hughes [Wed, 14 Jun 2023 21:30:29 +0000 (22:30 +0100)]
Reinstate installation of system prometheus package

10 months agoDisable node exporter's deprecated ntp collector
Tom Hughes [Wed, 14 Jun 2023 19:23:49 +0000 (20:23 +0100)]
Disable node exporter's deprecated ntp collector

10 months agoRun chrony_exporter for prometheus
Tom Hughes [Wed, 14 Jun 2023 18:11:59 +0000 (19:11 +0100)]
Run chrony_exporter for prometheus

10 months agoFix typo in interface names
Tom Hughes [Wed, 14 Jun 2023 17:14:50 +0000 (18:14 +0100)]
Fix typo in interface names

10 months agoUpdate prometheus, alertmanager and karma to latest versions
Tom Hughes [Tue, 13 Jun 2023 20:15:18 +0000 (21:15 +0100)]
Update prometheus, alertmanager and karma to latest versions

10 months agoDrop promscale support
Tom Hughes [Tue, 13 Jun 2023 19:53:26 +0000 (20:53 +0100)]
Drop promscale support

10 months agoFix threshold for juniper load average alarm
Tom Hughes [Mon, 12 Jun 2023 16:01:58 +0000 (17:01 +0100)]
Fix threshold for juniper load average alarm

10 months agoBase juniper CPU alarm on 5 minute load average
Tom Hughes [Mon, 12 Jun 2023 14:37:19 +0000 (15:37 +0100)]
Base juniper CPU alarm on 5 minute load average

10 months agoUse underlying interfaces for uplink monitoring
Tom Hughes [Sun, 11 Jun 2023 21:29:45 +0000 (22:29 +0100)]
Use underlying interfaces for uplink monitoring

10 months agoAdjust exim mail queue alerting thresholds
Tom Hughes [Sun, 11 Jun 2023 18:30:15 +0000 (19:30 +0100)]
Adjust exim mail queue alerting thresholds

10 months agoFix exim mail queue alerts
Tom Hughes [Sun, 11 Jun 2023 18:27:52 +0000 (19:27 +0100)]
Fix exim mail queue alerts

10 months agoDrop blackhole IPv6 route from Dublin to cogent block in Amsterdam
Tom Hughes [Sun, 11 Jun 2023 08:51:50 +0000 (09:51 +0100)]
Drop blackhole IPv6 route from Dublin to cogent block in Amsterdam

10 months agoDrop cogent addresses from Amsterdam machines
Tom Hughes [Sun, 11 Jun 2023 08:48:45 +0000 (09:48 +0100)]
Drop cogent addresses from Amsterdam machines

11 months agoRemove old cogent addresses from various ACLs
Tom Hughes [Sat, 10 Jun 2023 15:56:00 +0000 (16:56 +0100)]
Remove old cogent addresses from various ACLs

11 months agoUse he.net address to query metrics from Amsterdam switch
Tom Hughes [Sat, 10 Jun 2023 10:06:27 +0000 (11:06 +0100)]
Use he.net address to query metrics from Amsterdam switch

11 months agoplanet: increase rate limit to 16MB/s
Grant Slater [Fri, 9 Jun 2023 19:12:27 +0000 (20:12 +0100)]
planet: increase rate limit to 16MB/s

11 months agoMove norbert's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 18:00:04 +0000 (19:00 +0100)]
Move norbert's default route to he.net link

11 months agoCorrect he.net address for norbert
Tom Hughes [Fri, 9 Jun 2023 17:09:06 +0000 (18:09 +0100)]
Correct he.net address for norbert

11 months agoMove spike-{06,07,08}'s default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:59:17 +0000 (17:59 +0100)]
Move spike-{06,07,08}'s default route to he.net link

11 months agoMove dribble and ironbelly's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:47:59 +0000 (17:47 +0100)]
Move dribble and ironbelly's default route to he.net link

11 months agoMove dulcy and vhagar's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:27:53 +0000 (17:27 +0100)]
Move dulcy and vhagar's default route to he.net link

11 months agoMove odin's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:07:10 +0000 (17:07 +0100)]
Move odin's default route to he.net link

11 months agoMove faffy's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 13:53:43 +0000 (14:53 +0100)]
Move faffy's default route to he.net link

11 months agowordpress: Set 128M memory limit as required by WPML
Grant Slater [Mon, 5 Jun 2023 06:36:36 +0000 (09:36 +0300)]
wordpress: Set 128M memory limit as required by WPML

Signed-off-by: Grant Slater <github@firefishy.com>
11 months agocivi version bump
Guillaume RISCHARD [Sat, 3 Jun 2023 09:14:34 +0000 (05:14 -0400)]
civi version bump

11 months agodns: Upgrade dnscontrol to 4.1.0
Grant Slater [Wed, 31 May 2023 15:04:32 +0000 (18:04 +0300)]
dns: Upgrade dnscontrol to 4.1.0

11 months agoDrop the apache low request rate alert as it's not reliable
Tom Hughes [Thu, 25 May 2023 18:05:23 +0000 (19:05 +0100)]
Drop the apache low request rate alert as it's not reliable

11 months agoAdd ae60 to uplink interfaces in Dublin
Tom Hughes [Thu, 25 May 2023 14:14:33 +0000 (15:14 +0100)]
Add ae60 to uplink interfaces in Dublin

11 months agoAdd ae60 to uplink interfaces in Amsterdam
Tom Hughes [Thu, 25 May 2023 13:10:34 +0000 (14:10 +0100)]
Add ae60 to uplink interfaces in Amsterdam

11 months agoImagery: add OS Local 2023 April per request
Grant Slater [Thu, 25 May 2023 10:57:07 +0000 (13:57 +0300)]
Imagery: add OS Local 2023 April per request

11 months agoAdd he.net addresses to remaining Amsterdam machines
Tom Hughes [Wed, 24 May 2023 14:47:45 +0000 (15:47 +0100)]
Add he.net addresses to remaining Amsterdam machines

11 months agoUse source routing to pick the correct external network on faffy
Tom Hughes [Wed, 24 May 2023 08:20:53 +0000 (09:20 +0100)]
Use source routing to pick the correct external network on faffy

11 months agoAdd he.net address to faffy
Tom Hughes [Wed, 24 May 2023 08:02:04 +0000 (09:02 +0100)]
Add he.net address to faffy

11 months agoAllow network interfaces to override role attributes
Tom Hughes [Wed, 24 May 2023 07:25:53 +0000 (07:25 +0000)]
Allow network interfaces to override role attributes

11 months agoPush external network config in Amsterdam down to the hosts
Tom Hughes [Tue, 23 May 2023 21:27:36 +0000 (22:27 +0100)]
Push external network config in Amsterdam down to the hosts

11 months agoAdd new Amsterdam addresses to whitelists
Tom Hughes [Tue, 23 May 2023 20:11:51 +0000 (21:11 +0100)]
Add new Amsterdam addresses to whitelists

11 months agodns: bump dnscontrol to 4.0.1
Grant Slater [Fri, 19 May 2023 20:58:18 +0000 (23:58 +0300)]
dns: bump dnscontrol to 4.0.1

11 months agoUpdate site power limit for Amsterdam to 3.5kVA
Tom Hughes [Thu, 18 May 2023 18:44:38 +0000 (19:44 +0100)]
Update site power limit for Amsterdam to 3.5kVA

11 months agoReduce sensitivity of job processing rate alert
Tom Hughes [Wed, 17 May 2023 19:41:52 +0000 (20:41 +0100)]
Reduce sensitivity of job processing rate alert

11 months agoIncrease alert threshold for interface transmit/receive alerts
Tom Hughes [Wed, 17 May 2023 19:31:04 +0000 (20:31 +0100)]
Increase alert threshold for interface transmit/receive alerts

11 months agoReduce sensitivity of postgres idle transaction alert
Tom Hughes [Wed, 17 May 2023 19:28:09 +0000 (20:28 +0100)]
Reduce sensitivity of postgres idle transaction alert

11 months agodns: update dnscontrol to 3.31.4
Grant Slater [Fri, 12 May 2023 15:41:35 +0000 (16:41 +0100)]
dns: update dnscontrol to 3.31.4

12 months agoblog: explicitly track master branch
Grant Slater [Tue, 9 May 2023 14:09:59 +0000 (15:09 +0100)]
blog: explicitly track master branch

12 months agodmca: Deny access to .git directory
Grant Slater [Tue, 9 May 2023 13:25:29 +0000 (14:25 +0100)]
dmca: Deny access to .git directory

12 months agoMerge pull request #589 from pnorman/tilelog_v1.5.0
Tom Hughes [Mon, 8 May 2023 06:51:43 +0000 (07:51 +0100)]
Merge pull request #589 from pnorman/tilelog_v1.5.0

Update to tilelog v1.5.0

12 months agoUpdate to tilelog v1.5.0
Paul Norman [Mon, 8 May 2023 06:47:39 +0000 (23:47 -0700)]
Update to tilelog v1.5.0

12 months agoUpdate taginfo databases atomically
Tom Hughes [Sat, 6 May 2023 15:56:20 +0000 (16:56 +0100)]
Update taginfo databases atomically

Closes #588

12 months agoAvoid alerting on transient taginfo size changes during updates
Tom Hughes [Sat, 6 May 2023 11:02:41 +0000 (12:02 +0100)]
Avoid alerting on transient taginfo size changes during updates

12 months agoUpdate wal-g to 2.0.1
Tom Hughes [Thu, 4 May 2023 18:43:12 +0000 (19:43 +0100)]
Update wal-g to 2.0.1

12 months agoDrop wal-e support
Tom Hughes [Thu, 4 May 2023 18:42:01 +0000 (19:42 +0100)]
Drop wal-e support

12 months agodns: Update dnscontrol to 3.31.3
Grant Slater [Wed, 3 May 2023 10:36:06 +0000 (11:36 +0100)]
dns: Update dnscontrol to 3.31.3

12 months agoAdd an alert for postgresql transactions which have been idle too long
Tom Hughes [Wed, 3 May 2023 07:31:29 +0000 (08:31 +0100)]
Add an alert for postgresql transactions which have been idle too long

12 months agoAdd metric for idle postgres processes
Tom Hughes [Tue, 2 May 2023 23:10:44 +0000 (00:10 +0100)]
Add metric for idle postgres processes

12 months agoAdd postgres metric for active WAL segments
Tom Hughes [Tue, 2 May 2023 20:43:34 +0000 (21:43 +0100)]
Add postgres metric for active WAL segments

12 months agoUpdate matomo to 4.14.2
Tom Hughes [Tue, 2 May 2023 17:59:15 +0000 (18:59 +0100)]
Update matomo to 4.14.2

12 months agoUpdate chef client to 18.2.7
Tom Hughes [Tue, 2 May 2023 17:57:59 +0000 (18:57 +0100)]
Update chef client to 18.2.7

12 months agowordpress: block xmlrpc.php access for the moment
Grant Slater [Mon, 1 May 2023 19:21:49 +0000 (20:21 +0100)]
wordpress: block xmlrpc.php access for the moment

12 months agoDrop role for tabaluga
Tom Hughes [Wed, 26 Apr 2023 13:30:34 +0000 (14:30 +0100)]
Drop role for tabaluga

12 months agoProxy websocket requests for prometheus
Tom Hughes [Mon, 24 Apr 2023 08:46:20 +0000 (08:46 +0000)]
Proxy websocket requests for prometheus

12 months agoAdd some alerts for taginfo
Tom Hughes [Sun, 23 Apr 2023 15:13:58 +0000 (16:13 +0100)]
Add some alerts for taginfo

12 months agoCollect taginfo metrics
Tom Hughes [Sun, 23 Apr 2023 13:14:18 +0000 (14:14 +0100)]
Collect taginfo metrics

12 months agobackup: add awscli
Grant Slater [Wed, 19 Apr 2023 10:15:59 +0000 (11:15 +0100)]
backup: add awscli

12 months agocommunity: dump discourse to v3.0.3
Grant Slater [Wed, 19 Apr 2023 10:14:30 +0000 (11:14 +0100)]
community: dump discourse to v3.0.3

12 months agodns: upgrade dnscontrol to 3.31.1
Grant Slater [Wed, 19 Apr 2023 10:14:11 +0000 (11:14 +0100)]
dns: upgrade dnscontrol to 3.31.1

12 months agoRestrict guzzlehttp/psr7 to versions before 2.5.0 for mediawiki
Tom Hughes [Mon, 17 Apr 2023 19:22:01 +0000 (20:22 +0100)]
Restrict guzzlehttp/psr7 to versions before 2.5.0 for mediawiki

12 months agoMerge remote-tracking branch 'github/pull/587'
Tom Hughes [Sun, 16 Apr 2023 09:26:12 +0000 (10:26 +0100)]
Merge remote-tracking branch 'github/pull/587'

12 months agoEnable experimental wikidata source
Jochen Topf [Sat, 15 Apr 2023 20:10:11 +0000 (22:10 +0200)]
Enable experimental wikidata source

12 months agoConfigure database directory for geoipupdate explicitly
Tom Hughes [Fri, 14 Apr 2023 16:56:14 +0000 (17:56 +0100)]
Configure database directory for geoipupdate explicitly

12 months agocommunity: enable IPv6 template again
Grant Slater [Fri, 14 Apr 2023 05:02:08 +0000 (06:02 +0100)]
community: enable IPv6 template again

12 months agocommunity: Enable ssl stapling and set a ssl_dhparam
Grant Slater [Fri, 14 Apr 2023 04:41:20 +0000 (05:41 +0100)]
community: Enable ssl stapling and set a ssl_dhparam

12 months agocommunity: Temporarily use discourse-translator fork and add discourse-saved-searches
Grant Slater [Wed, 12 Apr 2023 17:25:38 +0000 (18:25 +0100)]
community: Temporarily use discourse-translator fork and add discourse-saved-searches

* Use a fork of discourse-translator to support sr-Latn see: https://github.com/discourse/discourse-translator/pull/103
* Added discourse-saved-searches

12 months agoApply memory limits to apache servers to avoid memory exhaustion
Tom Hughes [Wed, 12 Apr 2023 17:07:34 +0000 (18:07 +0100)]
Apply memory limits to apache servers to avoid memory exhaustion

12 months agoStop running hwraid status daemons
Tom Hughes [Wed, 12 Apr 2023 16:45:17 +0000 (17:45 +0100)]
Stop running hwraid status daemons

13 months agoSort supybot capabilities in it's prefered order
Tom Hughes [Mon, 10 Apr 2023 18:20:14 +0000 (19:20 +0100)]
Sort supybot capabilities in it's prefered order

13 months agoMove supybot from ironbelly to idris
Tom Hughes [Mon, 10 Apr 2023 18:07:57 +0000 (19:07 +0100)]
Move supybot from ironbelly to idris

13 months agoBase site power alerts on a one hour rolling average
Tom Hughes [Mon, 10 Apr 2023 15:04:05 +0000 (16:04 +0100)]
Base site power alerts on a one hour rolling average