Correct paths to tftp root directory

Merge remote-tracking branch 'github/pull/464'

Add PXE boot support using ipxe netboot.xyz

Use kitchen? instead of looking for TEST_KITCHEN in the environent

Don't try and install kernel modules when running tests

Increase maximum number of SMTP connections on shenron

Add roles for horntail and norbert

Blacklist acpi_power_meter on G6 machines

Modernise force loading of modules

Fix loading of new kernel modules

Load acpi_ipmi if ipmi_si and acpi_power_meter are present

Add argon2 test site

Add role for nidhogg

nominatim: do not start maintenance trigger

Merge remote-tracking branch 'github/pull/461'

Bump actions/checkout from 2.3.5 to 2.4.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: need to start maintenance trigger

nominatim: need to start the maintenance trigger

fix typo

nominatim: force maintenance job to run at UTC time

overpass: fix diff computation variable in munin graph

overpass: better labels for munin graphs

overpass: add munin scripts

Configure production site to use query.openstreetmap.org

Allow overpass_url to be configured for the rails_port resource

Remove no longer used osrm_url attribute for rails_port resource

Update promscale to 0.6.2

Enable thumbnail caching for images from wikimedia commons

Merge remote-tracking branch 'github/pull/460'

Bump cookstyle from 7.25.8 to 7.25.9

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.25.8 to 7.25.9.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.25.8...v7.25.9)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

put stormfly-04 back into production

Merge remote-tracking branch 'github/pull/456'

Merge remote-tracking branch 'github/pull/459'

Bump test-kitchen from 3.1.0 to 3.1.1

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Improve messages in civicrm osmf-verify-contributor plugin

New civicrm plug-ins for oauth authentication of members

This should enable MWG to automate processing of active mapper
applications

Remove unneeded sitepress-multilingual-cms

Add missing php module needed by civicrm

Update civicrm and some of its plugins

disable parallel workers on nominatim

Reduce TOTP lookbehind

Use an equality match for TOTP validation

dulcy: reduce work_mem

Add TOTP token enforcement to overpass

Convert some archive unpacking to use archive_file

Disable default apache site on overpass servers

Merge remote-tracking branch 'github/pull/455'

Update zshrc for tomh

stormfly-04: enable ICU tokenizer

Merge remote-tracking branch 'github/pull/458'

Merge remote-tracking branch 'github/pull/457'

Bump kitchen-dokken from 2.15.0 to 2.16.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.15.0...v2.16.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.25.6 to 7.25.8

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.25.6 to 7.25.8.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.25.6...v7.25.8)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

switch stormfly to import mode and use PG14

add overpass cookbook

Adds a cookbook to run an updateable overpass. The cookbook
is in theory able to install a fully-featured overpass API.
The new role 'overpass-query' sets up a reduced version only
suitable for running queries for the query feature on the
main site.

Sets role up on gorwen.

put dulcy back into production mode

Merge remote-tracking branch 'github/pull/454'

Bump kitchen-dokken from 2.14.0 to 2.15.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.14.0 to 2.15.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.14.0...v2.15.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

put dulcy in import mode and switch to postgresql 14

put pummelzacken back into production

Add firefishy wireguard peer

Merge remote-tracking branch 'github/pull/453'

Bump actions/checkout from 2.3.4 to 2.3.5

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.4...v2.3.5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Enable DHCP server on jakelong

downgrade pummelzacken to PG13 again

Require php-pear for dmca.openstreetmap.org

Add recipe to handle installing knife correctly

nominatim: need python3-datrie for ICU tokenizer

Update planetdump-ng to 1.2.3

Relax sand boxing to allow planetdump to send mail

Update planetdump-ng to 1.2.2

nominatim: switch pummelzacken to ICU tokenizer

nominatim: make sure that postcodes get updated on the servers

nominatim: remove some dead config options

pummelzacken: really switch to PG14

put pummelzacken in import mode and switch to PG14

Install knife on the chef server and update paths

nominatim: make tokenizer configurable

Target ruby 3.0 as that is what chef 17 uses

Monkey patch shell_out! for the subversion provider

https://github.com/chef/chef/pull/12150

Upgrade to chef 17

Use a precompiled promscale extension

Update promscale to 0.6.1

Run jekyll build in a UTF8 locale

Use packagecloud.io repository for timescaledb

Fetch the forum style from github instead of fluxbb.org

Update chef client to 16.16.13

Update piwik to 4.5.0

Fix hpasm alert thresholds for DL360e G8 machines

imagery: terminate service after max runtime

Add systemd service RuntimeMaxSec

imagery: fix service name

imagery: mapserv bombs with accept mode

imagery: use socket in accept mode

imagery: fix systemd_unit quoting

imagery: enable socket

imagery: use mapserver with systemd socket activation

Update URL for JOSM repository

Add systemd_socket resource

Mark slave interfaces in a bond as optional

This stops systemd-wait-online treaing them as required and
waiting for them to come up when they may not be connected - the
actual bond will still be required but will be up once at least
one slave interface is.