chef.git
3 years agofail2ban: separate ignoreips with spaces instead of comma
Sarah Hoffmann [Sun, 26 Mar 2017 20:09:45 +0000 (22:09 +0200)]
fail2ban: separate ignoreips with spaces instead of comma

3 years agoAdd certificate for opengeodata.org
Grant Slater [Sun, 26 Mar 2017 10:20:46 +0000 (11:20 +0100)]
Add certificate for opengeodata.org

3 years agoblog: ignore tar file-changed warning
Grant Slater [Sun, 26 Mar 2017 10:06:20 +0000 (11:06 +0100)]
blog: ignore tar file-changed warning

3 years agomediawiki: ignore tar file-changed warning
Grant Slater [Sun, 26 Mar 2017 10:03:37 +0000 (11:03 +0100)]
mediawiki: ignore tar file-changed warning

3 years agoSort ignored addresses
Tom Hughes [Sat, 25 Mar 2017 10:50:56 +0000 (10:50 +0000)]
Sort ignored addresses

3 years agonominatim: rotate apache logs more often
Sarah Hoffmann [Fri, 24 Mar 2017 22:33:46 +0000 (23:33 +0100)]
nominatim: rotate apache logs more often

3 years agoExempt out web server from nominatim fail2ban jail
Tom Hughes [Fri, 24 Mar 2017 18:44:23 +0000 (18:44 +0000)]
Exempt out web server from nominatim fail2ban jail

3 years agonominatim: ban IPs that repeatedly send bad requests
Sarah Hoffmann [Fri, 24 Mar 2017 16:33:04 +0000 (17:33 +0100)]
nominatim: ban IPs that repeatedly send bad requests

3 years agoMerge remote-tracking branch 'github/pull/118'
Tom Hughes [Fri, 24 Mar 2017 00:00:36 +0000 (00:00 +0000)]
Merge remote-tracking branch 'github/pull/118'

3 years agoExpire tiles from both osm.gz and osc.gz files
Paul Norman [Thu, 23 Mar 2017 23:39:18 +0000 (16:39 -0700)]
Expire tiles from both osm.gz and osc.gz files

3 years agoAdd X-Robots-Tag header to apis.dev.osm.org sites
Grant Slater [Thu, 23 Mar 2017 19:24:59 +0000 (19:24 +0000)]
Add X-Robots-Tag header to apis.dev.osm.org sites

3 years agoUse .osc.gz for diffs that tile replication fetches
Paul Norman [Thu, 23 Mar 2017 03:03:09 +0000 (20:03 -0700)]
Use .osc.gz for diffs that tile replication fetches

3 years agoConfigure server_protocol and server_url correctly
Tom Hughes [Wed, 22 Mar 2017 18:53:39 +0000 (18:53 +0000)]
Configure server_protocol and server_url correctly

3 years agoConfigure email addresses explicitly for rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:50:11 +0000 (18:50 +0000)]
Configure email addresses explicitly for rails port instances

3 years agoConfigure the publisher URL for rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:43:43 +0000 (18:43 +0000)]
Configure the publisher URL for rails port instances

3 years agoSet server_protocol to https for all rails port instances
Tom Hughes [Wed, 22 Mar 2017 18:25:11 +0000 (18:25 +0000)]
Set server_protocol to https for all rails port instances

3 years agoHandle server_url being commented out in the example configuration
Tom Hughes [Wed, 22 Mar 2017 17:17:47 +0000 (17:17 +0000)]
Handle server_url being commented out in the example configuration

3 years agoTry to make apache SSL stapling more robust
Tom Hughes [Tue, 21 Mar 2017 12:43:17 +0000 (12:43 +0000)]
Try to make apache SSL stapling more robust

3 years agoReplace easy_install_package with python_package
Tom Hughes [Fri, 17 Mar 2017 19:06:21 +0000 (19:06 +0000)]
Replace easy_install_package with python_package

3 years agoAdd a python cookbook
Tom Hughes [Fri, 17 Mar 2017 19:00:37 +0000 (19:00 +0000)]
Add a python cookbook

3 years agoFixed Typo in description
Holger Jeromin [Thu, 16 Mar 2017 18:34:31 +0000 (19:34 +0100)]
Fixed Typo in description

3 years agoAdd #osm-gsoc to cgiirc
Tom Hughes [Thu, 16 Mar 2017 09:50:02 +0000 (09:50 +0000)]
Add #osm-gsoc to cgiirc

3 years agoRemove no longer needed support for old Ubuntu versions
Tom Hughes [Sun, 12 Mar 2017 17:43:53 +0000 (17:43 +0000)]
Remove no longer needed support for old Ubuntu versions

3 years agoSwitch bytemark servers to use katla for readonly queries
Tom Hughes [Sun, 12 Mar 2017 15:14:13 +0000 (15:14 +0000)]
Switch bytemark servers to use katla for readonly queries

3 years agoFix hosts for upload backend
Tom Hughes [Sun, 12 Mar 2017 12:15:09 +0000 (12:15 +0000)]
Fix hosts for upload backend

3 years agoBring web site back online using karm
Tom Hughes [Sun, 12 Mar 2017 11:56:05 +0000 (11:56 +0000)]
Bring web site back online using karm

3 years agoUpdate database servers to postgres 9.5
Tom Hughes [Sun, 12 Mar 2017 11:32:52 +0000 (11:32 +0000)]
Update database servers to postgres 9.5

3 years agoMake karm the database master
Tom Hughes [Sun, 12 Mar 2017 11:12:12 +0000 (11:12 +0000)]
Make karm the database master

3 years agoTake web site offline
Tom Hughes [Sun, 12 Mar 2017 11:06:19 +0000 (11:06 +0000)]
Take web site offline

3 years agoMake expire-tiles a simple service instead of oneshot
Tom Hughes [Thu, 9 Mar 2017 21:04:16 +0000 (21:04 +0000)]
Make expire-tiles a simple service instead of oneshot

3 years agoSwitch katla to use postgresql.org packages
Tom Hughes [Sun, 5 Mar 2017 15:47:04 +0000 (15:47 +0000)]
Switch katla to use postgresql.org packages

3 years agoRemove cmd line options on osmium call not needed for current version.
Jochen Topf [Sun, 5 Mar 2017 15:20:16 +0000 (16:20 +0100)]
Remove cmd line options on osmium call not needed for current version.

3 years agoAvoid errors rotating logs on nodes where gpx-import is stopped
Tom Hughes [Sun, 5 Mar 2017 10:02:27 +0000 (10:02 +0000)]
Avoid errors rotating logs on nodes where gpx-import is stopped

3 years agomediawiki: remove unneeded parsoid code
Grant Slater [Sat, 4 Mar 2017 17:15:07 +0000 (17:15 +0000)]
mediawiki: remove unneeded parsoid code

3 years agomediawiki: update Language bundle to 2017.01
Grant Slater [Sat, 4 Mar 2017 17:09:34 +0000 (17:09 +0000)]
mediawiki: update Language bundle to 2017.01

3 years agomediawiki: parsoid switch to yaml config
Grant Slater [Sat, 4 Mar 2017 15:36:44 +0000 (15:36 +0000)]
mediawiki: parsoid switch to yaml config

3 years agoSwitch ramoth to use postgresql.org packages
Tom Hughes [Sat, 4 Mar 2017 15:31:37 +0000 (15:31 +0000)]
Switch ramoth to use postgresql.org packages

3 years agomediawiki: monkey-patch for broken parsoid release
Grant Slater [Sat, 4 Mar 2017 15:17:55 +0000 (15:17 +0000)]
mediawiki: monkey-patch for broken parsoid release

3 years agoSeparate the replication and expiry tasks for tile servers
Tom Hughes [Sat, 4 Mar 2017 12:13:28 +0000 (12:13 +0000)]
Separate the replication and expiry tasks for tile servers

They need to run as different users, so use a systemd path unit to
trigger the expiry without needing an awkward security transition.

3 years agoDon't check erb templates with rubocop
Tom Hughes [Sat, 4 Mar 2017 12:12:48 +0000 (12:12 +0000)]
Don't check erb templates with rubocop

3 years agoAdd support for systemd path units
Tom Hughes [Sat, 4 Mar 2017 11:16:13 +0000 (11:16 +0000)]
Add support for systemd path units

3 years agoRemove no_new_privileges from gpx-import service
Tom Hughes [Fri, 3 Mar 2017 22:28:18 +0000 (22:28 +0000)]
Remove no_new_privileges from gpx-import service

3 years agoRemove no_new_privileges from tile replication service
Tom Hughes [Fri, 3 Mar 2017 09:04:58 +0000 (09:04 +0000)]
Remove no_new_privileges from tile replication service

3 years agoUpdate piwik to 3.0.2
Tom Hughes [Thu, 2 Mar 2017 00:08:03 +0000 (00:08 +0000)]
Update piwik to 3.0.2

3 years agoUse systemctl for gpx-import log rotation
Tom Hughes [Tue, 28 Feb 2017 10:26:21 +0000 (10:26 +0000)]
Use systemctl for gpx-import log rotation

3 years agoUse sysment pygmentize for SyntaxHighlight extension
Tom Hughes [Tue, 28 Feb 2017 08:33:42 +0000 (08:33 +0000)]
Use sysment pygmentize for SyntaxHighlight extension

3 years agoModernise mapserv-fcgi services
Tom Hughes [Sun, 26 Feb 2017 12:11:07 +0000 (12:11 +0000)]
Modernise mapserv-fcgi services

3 years agoModernise some older systemd services
Tom Hughes [Sun, 26 Feb 2017 12:05:01 +0000 (12:05 +0000)]
Modernise some older systemd services

3 years agoSwitch to openstreetmap fork of supybot-git
Tom Hughes [Sun, 26 Feb 2017 11:52:01 +0000 (11:52 +0000)]
Switch to openstreetmap fork of supybot-git

Upstream appears to be dead and the plugin fails with recent
versions of GitPython as it doesn't understand the version.

3 years agoConvert update-lowzoom service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 11:42:28 +0000 (11:42 +0000)]
Convert update-lowzoom service to a systemd unit

3 years agoConvert gpx-import service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 11:19:41 +0000 (11:19 +0000)]
Convert gpx-import service to a systemd unit

3 years agoConvert supybot service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 10:55:02 +0000 (10:55 +0000)]
Convert supybot service to a systemd unit

3 years agoConvert gps-update service to a systemd unit
Tom Hughes [Sun, 26 Feb 2017 10:40:04 +0000 (10:40 +0000)]
Convert gps-update service to a systemd unit

3 years agoRemove lurien role
Tom Hughes [Sun, 26 Feb 2017 10:21:57 +0000 (10:21 +0000)]
Remove lurien role

3 years agoRemove some cleanup code
Tom Hughes [Sun, 26 Feb 2017 10:20:12 +0000 (10:20 +0000)]
Remove some cleanup code

3 years agoRemove some no longer needed code for old Ubuntu versions
Tom Hughes [Sun, 26 Feb 2017 10:19:09 +0000 (10:19 +0000)]
Remove some no longer needed code for old Ubuntu versions

3 years agoAdd blog assets recovered from 2006
Grant Slater [Sat, 25 Feb 2017 22:58:12 +0000 (22:58 +0000)]
Add blog assets recovered from 2006

3 years agoFix historical blog.osm.org file links
Grant Slater [Sat, 25 Feb 2017 22:25:40 +0000 (22:25 +0000)]
Fix historical blog.osm.org file links

3 years agoRe-enable wikdiff2
Tom Hughes [Sat, 25 Feb 2017 20:26:35 +0000 (20:26 +0000)]
Re-enable wikdiff2

3 years agoDisable wikidiff2
Tom Hughes [Sat, 25 Feb 2017 19:38:35 +0000 (19:38 +0000)]
Disable wikidiff2

3 years agoMake sure chef mysql configuration overrides defaults
Tom Hughes [Sat, 25 Feb 2017 19:25:34 +0000 (19:25 +0000)]
Make sure chef mysql configuration overrides defaults

3 years agoEnable query cache for mediawiki machines
Tom Hughes [Sat, 25 Feb 2017 18:04:14 +0000 (18:04 +0000)]
Enable query cache for mediawiki machines

3 years agoBring mysqld settings for mediawiki machines under chef control
Tom Hughes [Sat, 25 Feb 2017 17:48:25 +0000 (17:48 +0000)]
Bring mysqld settings for mediawiki machines under chef control

3 years agoRequire php-mbstring and php-xml for mediawiki
Tom Hughes [Sat, 25 Feb 2017 16:47:19 +0000 (16:47 +0000)]
Require php-mbstring and php-xml for mediawiki

3 years agoDrop PHP5 support from mediawiki cookbook
Tom Hughes [Sat, 25 Feb 2017 16:43:53 +0000 (16:43 +0000)]
Drop PHP5 support from mediawiki cookbook

3 years agoUpdate wiki to mediawiki 1.28
Tom Hughes [Sat, 25 Feb 2017 11:09:48 +0000 (11:09 +0000)]
Update wiki to mediawiki 1.28

3 years agoFix certificate paths for chef server
Tom Hughes [Wed, 22 Feb 2017 21:46:19 +0000 (21:46 +0000)]
Fix certificate paths for chef server

3 years agoUpdate chef server to 12.13.0
Tom Hughes [Wed, 22 Feb 2017 21:39:49 +0000 (21:39 +0000)]
Update chef server to 12.13.0

3 years agoUpdate subversion provider monkey patching
Tom Hughes [Wed, 22 Feb 2017 20:21:30 +0000 (20:21 +0000)]
Update subversion provider monkey patching

3 years agoInstall contact-form-7 extension in civicrm wordpress instance
Tom Hughes [Wed, 22 Feb 2017 19:40:43 +0000 (19:40 +0000)]
Install contact-form-7 extension in civicrm wordpress instance

3 years agoUpdate chef client to 12.19.33
Tom Hughes [Wed, 22 Feb 2017 19:00:29 +0000 (19:00 +0000)]
Update chef client to 12.19.33

3 years agoRemove last traces of legacy certificate support
Tom Hughes [Mon, 20 Feb 2017 15:39:26 +0000 (15:39 +0000)]
Remove last traces of legacy certificate support

3 years agoMerge what remains of apache::ssl into apache::default
Tom Hughes [Mon, 20 Feb 2017 15:34:09 +0000 (15:34 +0000)]
Merge what remains of apache::ssl into apache::default

3 years agoRemove a couple of requests for legacy certificates
Tom Hughes [Sun, 19 Feb 2017 19:38:44 +0000 (19:38 +0000)]
Remove a couple of requests for legacy certificates

3 years agoRemove legacy certificate support
Tom Hughes [Sun, 19 Feb 2017 19:19:36 +0000 (19:19 +0000)]
Remove legacy certificate support

3 years agoFix error reporting for blog aggregator cron job
Tom Hughes [Sat, 18 Feb 2017 15:04:33 +0000 (15:04 +0000)]
Fix error reporting for blog aggregator cron job

3 years agoSwitch main web site to letsencrypt
Tom Hughes [Sat, 18 Feb 2017 11:36:39 +0000 (11:36 +0000)]
Switch main web site to letsencrypt

3 years agoUpgrade foundation and DWG wikis to 1.28
Tom Hughes [Fri, 17 Feb 2017 14:52:33 +0000 (14:52 +0000)]
Upgrade foundation and DWG wikis to 1.28

3 years agoUpdate elasticsearch to 2.x on ridley
Tom Hughes [Fri, 17 Feb 2017 14:51:52 +0000 (14:51 +0000)]
Update elasticsearch to 2.x on ridley

3 years agoUpdate board wiki to 1.28
Tom Hughes [Fri, 17 Feb 2017 14:01:10 +0000 (14:01 +0000)]
Update board wiki to 1.28

3 years agoDrop use of legacy tile and osmfoundation certificates
Tom Hughes [Thu, 16 Feb 2017 21:13:22 +0000 (21:13 +0000)]
Drop use of legacy tile and osmfoundation certificates

3 years agoRemove support for the legacy tile certificate
Tom Hughes [Thu, 16 Feb 2017 21:03:07 +0000 (21:03 +0000)]
Remove support for the legacy tile certificate

3 years agoTeach tile servers to handle ACME challenges
Tom Hughes [Thu, 16 Feb 2017 19:02:37 +0000 (19:02 +0000)]
Teach tile servers to handle ACME challenges

3 years agoSwitch tile.osm.org to letsencrypt
Tom Hughes [Thu, 16 Feb 2017 18:53:38 +0000 (18:53 +0000)]
Switch tile.osm.org to letsencrypt

3 years agoSwitch nominatim.osm.org to letsencrypt
Tom Hughes [Wed, 15 Feb 2017 22:31:34 +0000 (22:31 +0000)]
Switch nominatim.osm.org to letsencrypt

3 years agodonate: disable mysql strict mode
Grant Slater [Wed, 15 Feb 2017 16:11:43 +0000 (16:11 +0000)]
donate: disable mysql strict mode

3 years agodonate: do not throw error on mysqli warning
Grant Slater [Wed, 15 Feb 2017 15:43:51 +0000 (15:43 +0000)]
donate: do not throw error on mysqli warning

3 years agodonate: use mysqli
Grant Slater [Wed, 15 Feb 2017 15:14:21 +0000 (15:14 +0000)]
donate: use mysqli

3 years agoimagery: enable http2
Grant Slater [Tue, 14 Feb 2017 22:33:21 +0000 (22:33 +0000)]
imagery: enable http2

3 years agoimagery: fix floating text and switch to https links in attribution
Grant Slater [Tue, 14 Feb 2017 22:23:00 +0000 (22:23 +0000)]
imagery: fix floating text and switch to https links in attribution

3 years agoimagery: fix nginx listen
Grant Slater [Tue, 14 Feb 2017 22:16:20 +0000 (22:16 +0000)]
imagery: fix nginx listen

3 years agotilecache: enable 443 on ipv4 too
Grant Slater [Tue, 14 Feb 2017 22:04:53 +0000 (22:04 +0000)]
tilecache: enable 443 on ipv4 too

3 years agoAdd layer switcher as soon as it is created
Tom Hughes [Tue, 14 Feb 2017 20:49:09 +0000 (20:49 +0000)]
Add layer switcher as soon as it is created

Without this we get an error if we add a layer that is in the
layer switcher to the map before the switcher is added.

3 years agoUse protocol relative URLs for imagery tiles
Tom Hughes [Tue, 14 Feb 2017 19:19:57 +0000 (19:19 +0000)]
Use protocol relative URLs for imagery tiles

3 years agoConfigure resolvers for stapling with nginx
Tom Hughes [Tue, 14 Feb 2017 19:15:35 +0000 (19:15 +0000)]
Configure resolvers for stapling with nginx

3 years agoLoad javascript resources over https
Tom Hughes [Tue, 14 Feb 2017 19:11:36 +0000 (19:11 +0000)]
Load javascript resources over https

3 years agoEnable SSL for imagery sites
Tom Hughes [Tue, 14 Feb 2017 18:37:22 +0000 (18:37 +0000)]
Enable SSL for imagery sites

3 years agoUpdate OTRS to 3.3.16
Tom Hughes [Tue, 14 Feb 2017 13:36:09 +0000 (13:36 +0000)]
Update OTRS to 3.3.16

3 years agoSWitch OTRS to use postgres 9.5
Tom Hughes [Tue, 14 Feb 2017 13:22:29 +0000 (13:22 +0000)]
SWitch OTRS to use postgres 9.5

3 years agoUpdate mediawiki cookbook for Ubuntu 16.04
Tom Hughes [Tue, 14 Feb 2017 12:33:55 +0000 (12:33 +0000)]
Update mediawiki cookbook for Ubuntu 16.04