chef.git
15 months agoAdd role for chrysophylax
Tom Hughes [Fri, 4 Jan 2019 14:23:44 +0000 (14:23 +0000)]
Add role for chrysophylax

15 months agoRemove redundant ssh key
Tom Hughes [Fri, 4 Jan 2019 11:58:01 +0000 (11:58 +0000)]
Remove redundant ssh key

15 months agoAdd some IPv4 nameservers for norbert
Tom Hughes [Fri, 4 Jan 2019 11:24:58 +0000 (11:24 +0000)]
Add some IPv4 nameservers for norbert

15 months agoAdd remote hands accounts for norbert
Tom Hughes [Fri, 4 Jan 2019 11:18:20 +0000 (11:18 +0000)]
Add remote hands accounts for norbert

15 months agoAdd role for norbert
Tom Hughes [Fri, 4 Jan 2019 10:55:12 +0000 (10:55 +0000)]
Add role for norbert

15 months agoUpdate chef client to 14.8.12
Tom Hughes [Wed, 2 Jan 2019 19:18:47 +0000 (19:18 +0000)]
Update chef client to 14.8.12

15 months agoCleanup munin config for non-existent disks
Tom Hughes [Wed, 2 Jan 2019 19:10:50 +0000 (19:10 +0000)]
Cleanup munin config for non-existent disks

15 months agoDon't monitor unconfigured or failed disks
Tom Hughes [Wed, 2 Jan 2019 18:19:50 +0000 (18:19 +0000)]
Don't monitor unconfigured or failed disks

15 months agoRecord spun up status consistently
Tom Hughes [Wed, 2 Jan 2019 18:54:12 +0000 (18:54 +0000)]
Record spun up status consistently

15 months agoDetect unconfigured and failed disks on megaraid controllers
Tom Hughes [Wed, 2 Jan 2019 18:15:35 +0000 (18:15 +0000)]
Detect unconfigured and failed disks on megaraid controllers

15 months agotilecache: remove trogdor as peer from sarkany
Grant Slater [Wed, 2 Jan 2019 17:17:59 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from sarkany

15 months agotilecache: remove trogdor as peer from simurgh
Grant Slater [Wed, 2 Jan 2019 17:17:06 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from simurgh

15 months agotilecache: remove trogdor as peer from cmok
Grant Slater [Wed, 2 Jan 2019 16:29:50 +0000 (16:29 +0000)]
tilecache: remove trogdor as peer from cmok

15 months agotilecache: remove trogdor as peer from rimfaxe
Grant Slater [Wed, 2 Jan 2019 16:28:55 +0000 (16:28 +0000)]
tilecache: remove trogdor as peer from rimfaxe

15 months agotilecache: remove trogdor as peer from angor
Grant Slater [Wed, 2 Jan 2019 16:27:14 +0000 (16:27 +0000)]
tilecache: remove trogdor as peer from angor

15 months agoMake replication delay monitoring more reliable
Tom Hughes [Tue, 1 Jan 2019 08:54:39 +0000 (08:54 +0000)]
Make replication delay monitoring more reliable

15 months agoUpdate carto stylesheet to v4.18.0
Tom Hughes [Fri, 21 Dec 2018 19:17:13 +0000 (19:17 +0000)]
Update carto stylesheet to v4.18.0

Closes #210

15 months agoimagery: use nginx upstream round-robin instead of least_conn
Grant Slater [Fri, 21 Dec 2018 13:45:14 +0000 (13:45 +0000)]
imagery: use nginx upstream round-robin instead of least_conn

15 months agoimagery: try harder to find a working fastcgi socket
Grant Slater [Fri, 21 Dec 2018 13:14:45 +0000 (13:14 +0000)]
imagery: try harder to find a working fastcgi socket

15 months agoRevert "systemd: fix property limit_cpu type"
Grant Slater [Fri, 21 Dec 2018 13:07:22 +0000 (13:07 +0000)]
Revert "systemd: fix property limit_cpu type"

This reverts commit 64602183a4d489484086f51b5cb4ad6f3dd59387.

15 months agosystemd: fix property limit_cpu type
Grant Slater [Fri, 21 Dec 2018 13:00:41 +0000 (13:00 +0000)]
systemd: fix property limit_cpu type

15 months agoimagery: fix typo
Grant Slater [Fri, 21 Dec 2018 12:55:24 +0000 (12:55 +0000)]
imagery: fix typo

15 months agoimagery: limit mapserv by CPU time
Grant Slater [Fri, 21 Dec 2018 12:53:24 +0000 (12:53 +0000)]
imagery: limit mapserv by CPU time

Use CPU time as a poor mans process limit, to kill process before it has leaked
too much memory. Memory limits do not seem to kill the process.

15 months agosystemd: Add LimitCPU support
Grant Slater [Fri, 21 Dec 2018 12:52:49 +0000 (12:52 +0000)]
systemd: Add LimitCPU support

15 months agoimagery: use limit_as on service
Grant Slater [Thu, 20 Dec 2018 22:42:53 +0000 (22:42 +0000)]
imagery: use limit_as on service

15 months agosystemd: add limitAS support
Grant Slater [Thu, 20 Dec 2018 22:42:08 +0000 (22:42 +0000)]
systemd: add limitAS support

15 months agoimagery: enable ubuntugis-unstable repo
Grant Slater [Thu, 20 Dec 2018 16:52:26 +0000 (16:52 +0000)]
imagery: enable ubuntugis-unstable repo

15 months agoimagery: remove legacy cleanup
Grant Slater [Thu, 20 Dec 2018 16:51:55 +0000 (16:51 +0000)]
imagery: remove legacy cleanup

15 months agoimagery: gb_os_sv disable diff layer by default
Grant Slater [Thu, 20 Dec 2018 16:35:09 +0000 (16:35 +0000)]
imagery: gb_os_sv disable diff layer by default

15 months agoimagery: mapserver connection defer
Grant Slater [Thu, 20 Dec 2018 16:34:29 +0000 (16:34 +0000)]
imagery: mapserver connection defer

15 months agoimagery: switch from multiwatch to seperate daemons
Grant Slater [Thu, 20 Dec 2018 15:28:39 +0000 (15:28 +0000)]
imagery: switch from multiwatch to seperate daemons

15 months agoimagery: ignore client about fastcgi side
Grant Slater [Wed, 19 Dec 2018 17:23:17 +0000 (17:23 +0000)]
imagery: ignore client about fastcgi side

15 months agoimagery: use multiple socket balancing
Grant Slater [Wed, 19 Dec 2018 17:12:57 +0000 (17:12 +0000)]
imagery: use multiple socket balancing

15 months agoimagery: do not fail socket upstreams
Grant Slater [Wed, 19 Dec 2018 15:55:28 +0000 (15:55 +0000)]
imagery: do not fail socket upstreams

15 months agoimagery: fix NA imagery properties
Grant Slater [Wed, 19 Dec 2018 13:19:51 +0000 (13:19 +0000)]
imagery: fix NA imagery properties

15 months agoimagery: Fix cookbook typo
Grant Slater [Wed, 19 Dec 2018 13:10:37 +0000 (13:10 +0000)]
imagery: Fix cookbook typo

15 months agoimagery: Add Namibian topo (pending GoFundMe target)
Grant Slater [Wed, 19 Dec 2018 13:07:51 +0000 (13:07 +0000)]
imagery: Add Namibian topo (pending GoFundMe target)

15 months agoDon't check disks in SLEEP or STANDBY mode
Tom Hughes [Tue, 18 Dec 2018 11:22:39 +0000 (11:22 +0000)]
Don't check disks in SLEEP or STANDBY mode

15 months agoEnable FTP helper
Grant Slater [Fri, 14 Dec 2018 18:10:23 +0000 (18:10 +0000)]
Enable FTP helper

15 months agoAdd helper support to firewall_rule
Grant Slater [Fri, 14 Dec 2018 18:10:12 +0000 (18:10 +0000)]
Add helper support to firewall_rule

15 months agoRemove FTP pasv port restrictions
Grant Slater [Fri, 14 Dec 2018 17:29:36 +0000 (17:29 +0000)]
Remove FTP pasv port restrictions

15 months agoFTP enable local perm for ftp users
Grant Slater [Fri, 14 Dec 2018 17:24:18 +0000 (17:24 +0000)]
FTP enable local perm for ftp users

15 months agoSwitch to custom PAM file for FTP
Grant Slater [Fri, 14 Dec 2018 17:00:34 +0000 (17:00 +0000)]
Switch to custom PAM file for FTP

15 months agoFix ftp shorewall action
Grant Slater [Fri, 14 Dec 2018 16:34:22 +0000 (16:34 +0000)]
Fix ftp shorewall action

15 months agoAdd basic FTP daemon to angor
Grant Slater [Fri, 14 Dec 2018 16:14:58 +0000 (16:14 +0000)]
Add basic FTP daemon to angor

15 months agoAdd ssh key for daveh
Tom Hughes [Fri, 14 Dec 2018 10:05:26 +0000 (10:05 +0000)]
Add ssh key for daveh

15 months agoFix munin replication plugin to work with osmium based state
Tom Hughes [Wed, 12 Dec 2018 20:22:57 +0000 (20:22 +0000)]
Fix munin replication plugin to work with osmium based state

15 months agoSwitch tile servers to use osmium for fetching diffs
Tom Hughes [Wed, 12 Dec 2018 19:04:23 +0000 (19:04 +0000)]
Switch tile servers to use osmium for fetching diffs

15 months agoAdd ramoth OOB to dhcp config
Tom Hughes [Sat, 8 Dec 2018 17:04:43 +0000 (17:04 +0000)]
Add ramoth OOB to dhcp config

15 months agoRemove database slave role from ramoth
Tom Hughes [Sat, 8 Dec 2018 16:53:17 +0000 (16:53 +0000)]
Remove database slave role from ramoth

15 months agoUpdate ramoth eth interfaces
Grant Slater [Sat, 8 Dec 2018 16:10:28 +0000 (16:10 +0000)]
Update ramoth eth interfaces

15 months agoDeploy 2019.stateofthemap.org
Tom Hughes [Sat, 8 Dec 2018 15:17:23 +0000 (15:17 +0000)]
Deploy 2019.stateofthemap.org

16 months agoUpdate IP addresses for pyrene
Tom Hughes [Wed, 5 Dec 2018 19:19:40 +0000 (19:19 +0000)]
Update IP addresses for pyrene

16 months agoExempt wikibase redirects from being rewritten to wiki pages
Tom Hughes [Wed, 28 Nov 2018 22:48:31 +0000 (22:48 +0000)]
Exempt wikibase redirects from being rewritten to wiki pages

16 months agoMerge remote-tracking branch 'github/pull/207'
Tom Hughes [Wed, 28 Nov 2018 21:10:07 +0000 (21:10 +0000)]
Merge remote-tracking branch 'github/pull/207'

16 months agoAdd Apache redirects for wiki
Yuri Astrakhan [Wed, 28 Nov 2018 18:21:58 +0000 (13:21 -0500)]
Add Apache redirects for wiki

These redirects allow proper Wikidata Query Service linking,
same as implemented on WMF sites.

16 months agoTry to fix OTRS queuing
Tom Hughes [Sun, 25 Nov 2018 20:22:20 +0000 (20:22 +0000)]
Try to fix OTRS queuing

16 months agoUpdate to use otrs.Console.pl for mail queue injection
Tom Hughes [Sun, 25 Nov 2018 19:04:26 +0000 (19:04 +0000)]
Update to use otrs.Console.pl for mail queue injection

Closes #205

16 months agoAdd a queue for the MWG on OTRS
Paul Norman [Sun, 25 Nov 2018 17:29:16 +0000 (09:29 -0800)]
Add a queue for the MWG on OTRS

16 months agoInstall zlib1g-dev for nokogiri
Tom Hughes [Sat, 24 Nov 2018 11:44:52 +0000 (11:44 +0000)]
Install zlib1g-dev for nokogiri

16 months agoUpdate carto stylesheet to v4.17.0
Tom Hughes [Fri, 23 Nov 2018 19:08:47 +0000 (19:08 +0000)]
Update carto stylesheet to v4.17.0

Closes #204

16 months agoUpdate piwik to 3.7.0
Tom Hughes [Tue, 20 Nov 2018 00:22:40 +0000 (00:22 +0000)]
Update piwik to 3.7.0

16 months agoremoving non-functional web page from allowed external images
Tigerfell [Mon, 19 Nov 2018 21:43:10 +0000 (22:43 +0100)]
removing non-functional web page from allowed external images

16 months agoSet a long timeout for dev instances proxying to cgimap
Tom Hughes [Mon, 19 Nov 2018 19:10:03 +0000 (19:10 +0000)]
Set a long timeout for dev instances proxying to cgimap

16 months agoUpdate bundle
Tom Hughes [Mon, 19 Nov 2018 19:09:56 +0000 (19:09 +0000)]
Update bundle

16 months agoMerge remote-tracking branch 'github/pull/202'
Tom Hughes [Mon, 19 Nov 2018 18:53:05 +0000 (18:53 +0000)]
Merge remote-tracking branch 'github/pull/202'

16 months agoadding automatic double redirect resolution
Tigerfell [Sun, 18 Nov 2018 20:26:46 +0000 (21:26 +0100)]
adding automatic double redirect resolution

17 months agoUpdate CiviCRM extensions to latest versions
Tom Hughes [Mon, 5 Nov 2018 11:25:24 +0000 (11:25 +0000)]
Update CiviCRM extensions to latest versions

17 months agoUpdate CiviCRM to 5.6.1
Tom Hughes [Mon, 5 Nov 2018 11:22:56 +0000 (11:22 +0000)]
Update CiviCRM to 5.6.1

17 months agoRun a job queue runner for each rails instance
Tom Hughes [Thu, 1 Nov 2018 19:06:21 +0000 (19:06 +0000)]
Run a job queue runner for each rails instance

Closes #201

17 months agoFix log rotation for dev apis
Tom Hughes [Wed, 31 Oct 2018 22:36:44 +0000 (22:36 +0000)]
Fix log rotation for dev apis

17 months agoAdded support for enableEntitySearchUI
Yuri Astrakhan [Sun, 28 Oct 2018 14:27:39 +0000 (10:27 -0400)]
Added support for enableEntitySearchUI

This feature will become available in v1.33. For now,
we continue using a nasty hack that should be removed as soon as
we migrate.

The current nasty hack:
  $wgResourceModules['wikibase.ui.entitysearch']['scripts'] = [];

Until then, it's a noop.

17 months agoUpdate carto stylesheet to v4.16.0
Tom Hughes [Fri, 19 Oct 2018 18:06:31 +0000 (19:06 +0100)]
Update carto stylesheet to v4.16.0

Closes #199

17 months agoAllow an optional .json extension on cgimap methods
Tom Hughes [Fri, 19 Oct 2018 17:58:12 +0000 (18:58 +0100)]
Allow an optional .json extension on cgimap methods

17 months agoAdd --enable-yajl when configuring cgimap
Tom Hughes [Fri, 19 Oct 2018 16:10:21 +0000 (17:10 +0100)]
Add --enable-yajl when configuring cgimap

17 months agoUpdate piwik to 3.6.1
Tom Hughes [Fri, 19 Oct 2018 15:53:18 +0000 (16:53 +0100)]
Update piwik to 3.6.1

17 months agoIncrease memory and disk cache size on jakelong
Tom Hughes [Thu, 18 Oct 2018 07:33:33 +0000 (08:33 +0100)]
Increase memory and disk cache size on jakelong

17 months agoRun composer for CirrusSearch
Tom Hughes [Sun, 14 Oct 2018 21:12:45 +0000 (22:12 +0100)]
Run composer for CirrusSearch

17 months agoRevert "Add Maps extension to the main wiki"
Tom Hughes [Sun, 14 Oct 2018 21:00:48 +0000 (22:00 +0100)]
Revert "Add Maps extension to the main wiki"

This reverts commit 5da3b1f59799cbc1283e79598a39c2715ba70fc4.

17 months agoAdd Maps extension to the main wiki
Tom Hughes [Sun, 14 Oct 2018 18:51:45 +0000 (19:51 +0100)]
Add Maps extension to the main wiki

17 months agoUpdate CiviCRM to 5.6.0
Tom Hughes [Sun, 14 Oct 2018 14:19:59 +0000 (15:19 +0100)]
Update CiviCRM to 5.6.0

18 months agoUse a letsencrypt certificate for the main mail server
Tom Hughes [Fri, 5 Oct 2018 18:10:10 +0000 (19:10 +0100)]
Use a letsencrypt certificate for the main mail server

18 months agoAdd optimised gnutls cipher string to SSL cookbook and use it for exim
Tom Hughes [Fri, 5 Oct 2018 15:09:20 +0000 (16:09 +0100)]
Add optimised gnutls cipher string to SSL cookbook and use it for exim

18 months agoImprove SMTP cipher selection
Tom Hughes [Fri, 5 Oct 2018 14:47:45 +0000 (15:47 +0100)]
Improve SMTP cipher selection

18 months agoPrefer server cipher ordering for SMTP
Tom Hughes [Fri, 5 Oct 2018 14:22:58 +0000 (15:22 +0100)]
Prefer server cipher ordering for SMTP

18 months agoDisable RC4, MD5 and SHA1 for SMTP encryption
Tom Hughes [Fri, 5 Oct 2018 14:22:24 +0000 (15:22 +0100)]
Disable RC4, MD5 and SHA1 for SMTP encryption

18 months agoRedirect all HTTP except openstreetmap.org straight to www
Tom Hughes [Fri, 5 Oct 2018 14:02:04 +0000 (15:02 +0100)]
Redirect all HTTP except openstreetmap.org straight to www

18 months agoDisable SSLv3 for SMTP connections
Tom Hughes [Fri, 5 Oct 2018 11:14:35 +0000 (12:14 +0100)]
Disable SSLv3 for SMTP connections

18 months agoUpdate IP addresses for jakelong
Tom Hughes [Wed, 3 Oct 2018 20:06:56 +0000 (21:06 +0100)]
Update IP addresses for jakelong

18 months agoRestore redirect from http://openstreetmap.org to https://openstreetmap.org
Tom Hughes [Tue, 2 Oct 2018 21:26:17 +0000 (22:26 +0100)]
Restore redirect from openstreetmap.org to https://openstreetmap.org

This is necessary for HSTS preload - we cannot redirect directly
to the www.openstreetmap.org name!

18 months agoDon't configure a flood_stage watermark for elasticsearch 5.x
Tom Hughes [Mon, 1 Oct 2018 21:43:34 +0000 (22:43 +0100)]
Don't configure a flood_stage watermark for elasticsearch 5.x

18 months agoUse java 8 for logstash
Tom Hughes [Mon, 1 Oct 2018 18:26:00 +0000 (19:26 +0100)]
Use java 8 for logstash

18 months agoUpdate elasticsearch configuraiton for 6.x
Tom Hughes [Mon, 1 Oct 2018 18:02:55 +0000 (19:02 +0100)]
Update elasticsearch configuraiton for 6.x

18 months agoUpgrade logstash to the 6.x release stream
Tom Hughes [Mon, 1 Oct 2018 17:37:56 +0000 (18:37 +0100)]
Upgrade logstash to the 6.x release stream

18 months agoDisable Wikibase custom searchbox
Yuri Astrakhan [Wed, 26 Sep 2018 18:08:36 +0000 (14:08 -0400)]
Disable Wikibase custom searchbox

See https://phabricator.wikimedia.org/T205560

18 months agoInclude WB items in regular search results by dflt
Yuri Astrakhan [Wed, 26 Sep 2018 22:02:05 +0000 (18:02 -0400)]
Include WB items in regular search results by dflt

getting ready for removing search autosuggester
regular search should still include wb item pages

18 months agoRaise maximum call limits for Lua parser funcs
Yuri Astrakhan [Wed, 26 Sep 2018 20:08:09 +0000 (21:08 +0100)]
Raise maximum call limits for Lua parser funcs

Raise expensive lua (and other function) call limits to match WP
Docs:  https://www.mediawiki.org/wiki/Manual:$wgExpensiveParserFunctionLimit
Wikipedia's Config:  https://noc.wikimedia.org/conf/highlight.php?file=CommonSettings.php

Closes #194

18 months agoReduce log history for render servers
Tom Hughes [Wed, 26 Sep 2018 07:26:31 +0000 (08:26 +0100)]
Reduce log history for render servers

18 months agoAllow ssh on port 45222
Tom Hughes [Tue, 25 Sep 2018 15:28:46 +0000 (16:28 +0100)]
Allow ssh on port 45222

18 months agoAdd role for cherufe
Tom Hughes [Tue, 25 Sep 2018 13:50:40 +0000 (14:50 +0100)]
Add role for cherufe