chef.git
2 years agoMerge remote-tracking branch 'github/pull/122'
Tom Hughes [Wed, 10 May 2017 07:27:11 +0000 (08:27 +0100)]
Merge remote-tracking branch 'github/pull/122'

2 years agoAdd OOB MAC address for eddie
Tom Hughes [Tue, 9 May 2017 10:05:31 +0000 (11:05 +0100)]
Add OOB MAC address for eddie

2 years agoAdd role for eddie
Tom Hughes [Tue, 9 May 2017 10:01:45 +0000 (11:01 +0100)]
Add role for eddie

2 years agoAdd OOB MAC addresses for tiamat nodes
Tom Hughes [Tue, 9 May 2017 07:51:08 +0000 (08:51 +0100)]
Add OOB MAC addresses for tiamat nodes

2 years agoOnly include nodes with an FQDN in git ACL
Tom Hughes [Tue, 9 May 2017 00:14:14 +0000 (01:14 +0100)]
Only include nodes with an FQDN in git ACL

2 years agoAdd WDC RE3 to udev rules
Grant Slater [Sun, 7 May 2017 00:04:24 +0000 (01:04 +0100)]
Add WDC RE3 to udev rules

2 years agoRemove tilecache role from angor
Grant Slater [Sat, 6 May 2017 14:28:30 +0000 (15:28 +0100)]
Remove tilecache role from angor

2 years agoAdd tiamat HW watchdog
Grant Slater [Tue, 2 May 2017 11:51:20 +0000 (12:51 +0100)]
Add tiamat HW watchdog

2 years agoPush creation time for hourly and daily diffs back a little
Tom Hughes [Tue, 2 May 2017 11:23:34 +0000 (12:23 +0100)]
Push creation time for hourly and daily diffs back a little

2 years agoRestart chef-client by sending TERM and letting systemd restart it
Tom Hughes [Mon, 1 May 2017 20:09:31 +0000 (21:09 +0100)]
Restart chef-client by sending TERM and letting systemd restart it

2 years agoUpdate chef client to 12.20.3
Tom Hughes [Mon, 1 May 2017 17:47:04 +0000 (18:47 +0100)]
Update chef client to 12.20.3

2 years agoAdd udev disk reliability tuning
Grant Slater [Sat, 29 Apr 2017 18:01:02 +0000 (19:01 +0100)]
Add udev disk reliability tuning

2 years agoput pummelzacken back into production mode
Sarah Hoffmann [Wed, 26 Apr 2017 07:36:31 +0000 (09:36 +0200)]
put pummelzacken back into production mode

2 years agoExempt outgoing mail from spam checks
Tom Hughes [Mon, 24 Apr 2017 12:31:23 +0000 (13:31 +0100)]
Exempt outgoing mail from spam checks

2 years agonominatim: add read timeout to apache
Sarah Hoffmann [Mon, 24 Apr 2017 12:10:18 +0000 (14:10 +0200)]
nominatim: add read timeout to apache

2 years agoGeneralise spam block
Tom Hughes [Mon, 24 Apr 2017 09:30:37 +0000 (10:30 +0100)]
Generalise spam block

2 years agoRemove CPU alert thresholds for tile caches
Tom Hughes [Mon, 24 Apr 2017 09:21:44 +0000 (10:21 +0100)]
Remove CPU alert thresholds for tile caches

The bug that caused nginx to spin seems to be fixed and this
is prone to false positives.

2 years agoTrack backport branches of osm2pgsql git on irc
Paul Norman [Wed, 19 Apr 2017 20:58:40 +0000 (13:58 -0700)]
Track backport branches of osm2pgsql git on irc

Per https://github.com/mmueller/supybot-git#configuration multiple branches need to be defined with multiple repository sections

2 years agoIncrease MaxRequestWorkers for piwik
Tom Hughes [Wed, 19 Apr 2017 15:01:14 +0000 (16:01 +0100)]
Increase MaxRequestWorkers for piwik

2 years agoReduce WAL archive length.
Matt Amos [Wed, 19 Apr 2017 11:47:45 +0000 (12:47 +0100)]
Reduce WAL archive length.

Was 40 days, this reduces it to 21 days. That should roughly halve
the amount of disk space needed to store all the WALs, at the cost
that it's more difficult to recover a replica which has been out of
sync for between 22 and 40 days.

Closes #121

2 years agoput pummelzacken into import mode
Sarah Hoffmann [Tue, 18 Apr 2017 21:01:03 +0000 (23:01 +0200)]
put pummelzacken into import mode

2 years agoTweak spam block
Tom Hughes [Mon, 17 Apr 2017 18:11:40 +0000 (19:11 +0100)]
Tweak spam block

2 years agoTweak spam block
Tom Hughes [Mon, 17 Apr 2017 09:36:23 +0000 (10:36 +0100)]
Tweak spam block

2 years agoMake renew-hook send knife upload output to STDOUT
Tom Hughes [Sat, 15 Apr 2017 09:48:53 +0000 (10:48 +0100)]
Make renew-hook send knife upload output to STDOUT

2 years agoOnly send HEAD and GET for single objects to cgimap
Tom Hughes [Fri, 14 Apr 2017 06:37:17 +0000 (07:37 +0100)]
Only send HEAD and GET for single objects to cgimap

2 years agonominatim: disable automatic code updates on dulcy
Sarah Hoffmann [Thu, 13 Apr 2017 20:18:10 +0000 (22:18 +0200)]
nominatim: disable automatic code updates on dulcy

2 years agoRun letsencrypt renewals in acme directory
Tom Hughes [Thu, 13 Apr 2017 12:35:33 +0000 (13:35 +0100)]
Run letsencrypt renewals in acme directory

This makes sure the upload can see the right knife configuration.

2 years agoRun renew-hook as bash
Tom Hughes [Thu, 13 Apr 2017 06:11:40 +0000 (07:11 +0100)]
Run renew-hook as bash

2 years agoSend node/way/relation history calls to cgimap
Tom Hughes [Tue, 11 Apr 2017 20:02:20 +0000 (21:02 +0100)]
Send node/way/relation history calls to cgimap

2 years agoSend changeset download requests to cgimap
Tom Hughes [Tue, 11 Apr 2017 18:48:25 +0000 (19:48 +0100)]
Send changeset download requests to cgimap

2 years agoMake sure letsencrypt renewal errors are seen by somebody
Tom Hughes [Tue, 11 Apr 2017 16:01:24 +0000 (17:01 +0100)]
Make sure letsencrypt renewal errors are seen by somebody

2 years agoFix paths in letsencrypt renewal scripts
Tom Hughes [Tue, 11 Apr 2017 15:36:15 +0000 (16:36 +0100)]
Fix paths in letsencrypt renewal scripts

2 years agoTreat an exit status of 3 as success for chef-client
Tom Hughes [Tue, 11 Apr 2017 08:35:44 +0000 (09:35 +0100)]
Treat an exit status of 3 as success for chef-client

When chef-client is terminated with SIGTERM it unhelpfully
returns an exit status of 3 which, by default, is treated as
an unsuccessful exit.

2 years agoUpdate chef client to 12.19.36
Tom Hughes [Tue, 11 Apr 2017 08:26:33 +0000 (09:26 +0100)]
Update chef client to 12.19.36

2 years agoUpdate libosmium and osmium-tool versions for taginfo.
Jochen Topf [Mon, 10 Apr 2017 08:55:33 +0000 (10:55 +0200)]
Update libosmium and osmium-tool versions for taginfo.

2 years agoUpdate piwik to 3.0.3
Tom Hughes [Fri, 7 Apr 2017 19:29:19 +0000 (20:29 +0100)]
Update piwik to 3.0.3

2 years agoChange foundation wiki title to not mention 'wiki'
Harry Wood [Thu, 6 Apr 2017 21:46:18 +0000 (22:46 +0100)]
Change foundation wiki title to not mention 'wiki'

This feeds into $wgSitename which feeds into various places, most
obviously the HTMLi title tag.

One concern with this change would be that it might cause a rename
of the "project" namespace, but from what I can tell this has taken
the name "OpenStreetMap" anyway for some reason.

Closes #119

3 years agoExtend years for mailman archive
Grant Slater [Wed, 5 Apr 2017 22:53:54 +0000 (23:53 +0100)]
Extend years for mailman archive

3 years agoAdd IPv6 gateway for angor
Tom Hughes [Wed, 29 Mar 2017 22:05:01 +0000 (23:05 +0100)]
Add IPv6 gateway for angor

3 years agoUpdate location for angor
Tom Hughes [Wed, 29 Mar 2017 21:51:36 +0000 (22:51 +0100)]
Update location for angor

3 years agoAdd role for angor
Tom Hughes [Wed, 29 Mar 2017 17:56:23 +0000 (18:56 +0100)]
Add role for angor

3 years agofail2ban: separate ignoreips with spaces instead of comma
Sarah Hoffmann [Sun, 26 Mar 2017 20:09:45 +0000 (22:09 +0200)]
fail2ban: separate ignoreips with spaces instead of comma

3 years agoAdd certificate for opengeodata.org
Grant Slater [Sun, 26 Mar 2017 10:20:46 +0000 (11:20 +0100)]
Add certificate for opengeodata.org

3 years agoblog: ignore tar file-changed warning
Grant Slater [Sun, 26 Mar 2017 10:06:20 +0000 (11:06 +0100)]
blog: ignore tar file-changed warning

3 years agomediawiki: ignore tar file-changed warning
Grant Slater [Sun, 26 Mar 2017 10:03:37 +0000 (11:03 +0100)]
mediawiki: ignore tar file-changed warning

3 years agoSort ignored addresses
Tom Hughes [Sat, 25 Mar 2017 10:50:56 +0000 (10:50 +0000)]
Sort ignored addresses

3 years agonominatim: rotate apache logs more often
Sarah Hoffmann [Fri, 24 Mar 2017 22:33:46 +0000 (23:33 +0100)]
nominatim: rotate apache logs more often

3 years agoExempt out web server from nominatim fail2ban jail
Tom Hughes [Fri, 24 Mar 2017 18:44:23 +0000 (18:44 +0000)]
Exempt out web server from nominatim fail2ban jail

3 years agonominatim: ban IPs that repeatedly send bad requests
Sarah Hoffmann [Fri, 24 Mar 2017 16:33:04 +0000 (17:33 +0100)]
nominatim: ban IPs that repeatedly send bad requests

3 years agoMerge remote-tracking branch 'github/pull/118'
Tom Hughes [Fri, 24 Mar 2017 00:00:36 +0000 (00:00 +0000)]
Merge remote-tracking branch 'github/pull/118'

3 years agoExpire tiles from both osm.gz and osc.gz files
Paul Norman [Thu, 23 Mar 2017 23:39:18 +0000 (16:39 -0700)]
Expire tiles from both osm.gz and osc.gz files

3 years agoAdd X-Robots-Tag header to apis.dev.osm.org sites
Grant Slater [Thu, 23 Mar 2017 19:24:59 +0000 (19:24 +0000)]
Add X-Robots-Tag header to apis.dev.osm.org sites

3 years agoUse .osc.gz for diffs that tile replication fetches
Paul Norman [Thu, 23 Mar 2017 03:03:09 +0000 (20:03 -0700)]
Use .osc.gz for diffs that tile replication fetches

3 years agoConfigure server_protocol and server_url correctly
Tom Hughes [Wed, 22 Mar 2017 18:53:39 +0000 (18:53 +0000)]
Configure server_protocol and server_url correctly

3 years agoConfigure email addresses explicitly for rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:50:11 +0000 (18:50 +0000)]
Configure email addresses explicitly for rails port instances

3 years agoConfigure the publisher URL for rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:43:43 +0000 (18:43 +0000)]
Configure the publisher URL for rails port instances

3 years agoSet server_protocol to https for all rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:25:11 +0000 (18:25 +0000)]
Set server_protocol to https for all rails port instances

3 years agoHandle server_url being commented out in the example configuration
Tom Hughes [Wed, 22 Mar 2017 17:17:47 +0000 (17:17 +0000)]
Handle server_url being commented out in the example configuration

3 years agoTry to make apache SSL stapling more robust
Tom Hughes [Tue, 21 Mar 2017 12:43:17 +0000 (12:43 +0000)]
Try to make apache SSL stapling more robust

3 years agoReplace easy_install_package with python_package
Tom Hughes [Fri, 17 Mar 2017 19:06:21 +0000 (19:06 +0000)]
Replace easy_install_package with python_package

3 years agoAdd a python cookbook
Tom Hughes [Fri, 17 Mar 2017 19:00:37 +0000 (19:00 +0000)]
Add a python cookbook

3 years agoFixed Typo in description
Holger Jeromin [Thu, 16 Mar 2017 18:34:31 +0000 (19:34 +0100)]
Fixed Typo in description

3 years agoAdd #osm-gsoc to cgiirc
Tom Hughes [Thu, 16 Mar 2017 09:50:02 +0000 (09:50 +0000)]
Add #osm-gsoc to cgiirc

3 years agoRemove no longer needed support for old Ubuntu versions
Tom Hughes [Sun, 12 Mar 2017 17:43:53 +0000 (17:43 +0000)]
Remove no longer needed support for old Ubuntu versions

3 years agoSwitch bytemark servers to use katla for readonly queries
Tom Hughes [Sun, 12 Mar 2017 15:14:13 +0000 (15:14 +0000)]
Switch bytemark servers to use katla for readonly queries

3 years agoFix hosts for upload backend
Tom Hughes [Sun, 12 Mar 2017 12:15:09 +0000 (12:15 +0000)]
Fix hosts for upload backend

3 years agoBring web site back online using karm
Tom Hughes [Sun, 12 Mar 2017 11:56:05 +0000 (11:56 +0000)]
Bring web site back online using karm

3 years agoUpdate database servers to postgres 9.5
Tom Hughes [Sun, 12 Mar 2017 11:32:52 +0000 (11:32 +0000)]
Update database servers to postgres 9.5

3 years agoMake karm the database master
Tom Hughes [Sun, 12 Mar 2017 11:12:12 +0000 (11:12 +0000)]
Make karm the database master

3 years agoTake web site offline
Tom Hughes [Sun, 12 Mar 2017 11:06:19 +0000 (11:06 +0000)]
Take web site offline

3 years agoMake expire-tiles a simple service instead of oneshot
Tom Hughes [Thu, 9 Mar 2017 21:04:16 +0000 (21:04 +0000)]
Make expire-tiles a simple service instead of oneshot

3 years agoSwitch katla to use postgresql.org packages
Tom Hughes [Sun, 5 Mar 2017 15:47:04 +0000 (15:47 +0000)]
Switch katla to use postgresql.org packages

3 years agoRemove cmd line options on osmium call not needed for current version.
Jochen Topf [Sun, 5 Mar 2017 15:20:16 +0000 (16:20 +0100)]
Remove cmd line options on osmium call not needed for current version.

3 years agoAvoid errors rotating logs on nodes where gpx-import is stopped
Tom Hughes [Sun, 5 Mar 2017 10:02:27 +0000 (10:02 +0000)]
Avoid errors rotating logs on nodes where gpx-import is stopped

3 years agomediawiki: remove unneeded parsoid code
Grant Slater [Sat, 4 Mar 2017 17:15:07 +0000 (17:15 +0000)]
mediawiki: remove unneeded parsoid code

3 years agomediawiki: update Language bundle to 2017.01
Grant Slater [Sat, 4 Mar 2017 17:09:34 +0000 (17:09 +0000)]
mediawiki: update Language bundle to 2017.01

3 years agomediawiki: parsoid switch to yaml config
Grant Slater [Sat, 4 Mar 2017 15:36:44 +0000 (15:36 +0000)]
mediawiki: parsoid switch to yaml config

3 years agoSwitch ramoth to use postgresql.org packages
Tom Hughes [Sat, 4 Mar 2017 15:31:37 +0000 (15:31 +0000)]
Switch ramoth to use postgresql.org packages

3 years agomediawiki: monkey-patch for broken parsoid release
Grant Slater [Sat, 4 Mar 2017 15:17:55 +0000 (15:17 +0000)]
mediawiki: monkey-patch for broken parsoid release

3 years agoSeparate the replication and expiry tasks for tile servers
Tom Hughes [Sat, 4 Mar 2017 12:13:28 +0000 (12:13 +0000)]
Separate the replication and expiry tasks for tile servers

They need to run as different users, so use a systemd path unit to
trigger the expiry without needing an awkward security transition.

3 years agoDon't check erb templates with rubocop
Tom Hughes [Sat, 4 Mar 2017 12:12:48 +0000 (12:12 +0000)]
Don't check erb templates with rubocop

3 years agoAdd support for systemd path units
Tom Hughes [Sat, 4 Mar 2017 11:16:13 +0000 (11:16 +0000)]
Add support for systemd path units

3 years agoRemove no_new_privileges from gpx-import service
Tom Hughes [Fri, 3 Mar 2017 22:28:18 +0000 (22:28 +0000)]
Remove no_new_privileges from gpx-import service

3 years agoRemove no_new_privileges from tile replication service
Tom Hughes [Fri, 3 Mar 2017 09:04:58 +0000 (09:04 +0000)]
Remove no_new_privileges from tile replication service

3 years agoUpdate piwik to 3.0.2
Tom Hughes [Thu, 2 Mar 2017 00:08:03 +0000 (00:08 +0000)]
Update piwik to 3.0.2

3 years agoUse systemctl for gpx-import log rotation
Tom Hughes [Tue, 28 Feb 2017 10:26:21 +0000 (10:26 +0000)]
Use systemctl for gpx-import log rotation

3 years agoUse sysment pygmentize for SyntaxHighlight extension
Tom Hughes [Tue, 28 Feb 2017 08:33:42 +0000 (08:33 +0000)]
Use sysment pygmentize for SyntaxHighlight extension

3 years agoModernise mapserv-fcgi services
Tom Hughes [Sun, 26 Feb 2017 12:11:07 +0000 (12:11 +0000)]
Modernise mapserv-fcgi services

3 years agoModernise some older systemd services
Tom Hughes [Sun, 26 Feb 2017 12:05:01 +0000 (12:05 +0000)]
Modernise some older systemd services

3 years agoSwitch to openstreetmap fork of supybot-git
Tom Hughes [Sun, 26 Feb 2017 11:52:01 +0000 (11:52 +0000)]
Switch to openstreetmap fork of supybot-git

Upstream appears to be dead and the plugin fails with recent
versions of GitPython as it doesn't understand the version.

3 years agoConvert update-lowzoom service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 11:42:28 +0000 (11:42 +0000)]
Convert update-lowzoom service to a systemd unit

3 years agoConvert gpx-import service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 11:19:41 +0000 (11:19 +0000)]
Convert gpx-import service to a systemd unit

3 years agoConvert supybot service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 10:55:02 +0000 (10:55 +0000)]
Convert supybot service to a systemd unit

3 years agoConvert gps-update service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 10:40:04 +0000 (10:40 +0000)]
Convert gps-update service to a systemd unit

3 years agoRemove lurien role
Tom Hughes [Sun, 26 Feb 2017 10:21:57 +0000 (10:21 +0000)]
Remove lurien role

3 years agoRemove some cleanup code
Tom Hughes [Sun, 26 Feb 2017 10:20:12 +0000 (10:20 +0000)]
Remove some cleanup code

3 years agoRemove some no longer needed code for old Ubuntu versions
Tom Hughes [Sun, 26 Feb 2017 10:19:09 +0000 (10:19 +0000)]
Remove some no longer needed code for old Ubuntu versions

3 years agoAdd blog assets recovered from 2006
Grant Slater [Sat, 25 Feb 2017 22:58:12 +0000 (22:58 +0000)]
Add blog assets recovered from 2006

3 years agoFix historical blog.osm.org file links
Grant Slater [Sat, 25 Feb 2017 22:25:40 +0000 (22:25 +0000)]
Fix historical blog.osm.org file links

3 years agoRe-enable wikdiff2
Tom Hughes [Sat, 25 Feb 2017 20:26:35 +0000 (20:26 +0000)]
Re-enable wikdiff2