chef.git
13 months agoAdd role for necrosan
Tom Hughes [Mon, 7 Jan 2019 15:04:23 +0000 (15:04 +0000)]
Add role for necrosan

13 months agoCorrect location
Tom Hughes [Sat, 5 Jan 2019 12:17:50 +0000 (12:17 +0000)]
Correct location

13 months agoCorrect IP address
Tom Hughes [Fri, 4 Jan 2019 22:48:26 +0000 (22:48 +0000)]
Correct IP address

13 months agoEnable munin monitoring for Grifon machines
Tom Hughes [Fri, 4 Jan 2019 16:27:18 +0000 (16:27 +0000)]
Enable munin monitoring for Grifon machines

13 months agoEnable SNMP monitoring for iWay machines
Tom Hughes [Fri, 4 Jan 2019 16:10:28 +0000 (16:10 +0000)]
Enable SNMP monitoring for iWay machines

13 months agoUse correct upstream for chrysophylax
Tom Hughes [Fri, 4 Jan 2019 16:00:07 +0000 (16:00 +0000)]
Use correct upstream for chrysophylax

13 months agoAdd role for chrysophylax
Tom Hughes [Fri, 4 Jan 2019 14:23:44 +0000 (14:23 +0000)]
Add role for chrysophylax

13 months agoRemove redundant ssh key
Tom Hughes [Fri, 4 Jan 2019 11:58:01 +0000 (11:58 +0000)]
Remove redundant ssh key

13 months agoAdd some IPv4 nameservers for norbert
Tom Hughes [Fri, 4 Jan 2019 11:24:58 +0000 (11:24 +0000)]
Add some IPv4 nameservers for norbert

13 months agoAdd remote hands accounts for norbert
Tom Hughes [Fri, 4 Jan 2019 11:18:20 +0000 (11:18 +0000)]
Add remote hands accounts for norbert

13 months agoAdd role for norbert
Tom Hughes [Fri, 4 Jan 2019 10:55:12 +0000 (10:55 +0000)]
Add role for norbert

13 months agoUpdate chef client to 14.8.12
Tom Hughes [Wed, 2 Jan 2019 19:18:47 +0000 (19:18 +0000)]
Update chef client to 14.8.12

13 months agoCleanup munin config for non-existent disks
Tom Hughes [Wed, 2 Jan 2019 19:10:50 +0000 (19:10 +0000)]
Cleanup munin config for non-existent disks

13 months agoDon't monitor unconfigured or failed disks
Tom Hughes [Wed, 2 Jan 2019 18:19:50 +0000 (18:19 +0000)]
Don't monitor unconfigured or failed disks

13 months agoRecord spun up status consistently
Tom Hughes [Wed, 2 Jan 2019 18:54:12 +0000 (18:54 +0000)]
Record spun up status consistently

13 months agoDetect unconfigured and failed disks on megaraid controllers
Tom Hughes [Wed, 2 Jan 2019 18:15:35 +0000 (18:15 +0000)]
Detect unconfigured and failed disks on megaraid controllers

13 months agotilecache: remove trogdor as peer from sarkany
Grant Slater [Wed, 2 Jan 2019 17:17:59 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from sarkany

13 months agotilecache: remove trogdor as peer from simurgh
Grant Slater [Wed, 2 Jan 2019 17:17:06 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from simurgh

13 months agotilecache: remove trogdor as peer from cmok
Grant Slater [Wed, 2 Jan 2019 16:29:50 +0000 (16:29 +0000)]
tilecache: remove trogdor as peer from cmok

13 months agotilecache: remove trogdor as peer from rimfaxe
Grant Slater [Wed, 2 Jan 2019 16:28:55 +0000 (16:28 +0000)]
tilecache: remove trogdor as peer from rimfaxe

13 months agotilecache: remove trogdor as peer from angor
Grant Slater [Wed, 2 Jan 2019 16:27:14 +0000 (16:27 +0000)]
tilecache: remove trogdor as peer from angor

13 months agoMake replication delay monitoring more reliable
Tom Hughes [Tue, 1 Jan 2019 08:54:39 +0000 (08:54 +0000)]
Make replication delay monitoring more reliable

14 months agoUpdate carto stylesheet to v4.18.0
Tom Hughes [Fri, 21 Dec 2018 19:17:13 +0000 (19:17 +0000)]
Update carto stylesheet to v4.18.0

Closes #210

14 months agoimagery: use nginx upstream round-robin instead of least_conn
Grant Slater [Fri, 21 Dec 2018 13:45:14 +0000 (13:45 +0000)]
imagery: use nginx upstream round-robin instead of least_conn

14 months agoimagery: try harder to find a working fastcgi socket
Grant Slater [Fri, 21 Dec 2018 13:14:45 +0000 (13:14 +0000)]
imagery: try harder to find a working fastcgi socket

14 months agoRevert "systemd: fix property limit_cpu type"
Grant Slater [Fri, 21 Dec 2018 13:07:22 +0000 (13:07 +0000)]
Revert "systemd: fix property limit_cpu type"

This reverts commit 64602183a4d489484086f51b5cb4ad6f3dd59387.

14 months agosystemd: fix property limit_cpu type
Grant Slater [Fri, 21 Dec 2018 13:00:41 +0000 (13:00 +0000)]
systemd: fix property limit_cpu type

14 months agoimagery: fix typo
Grant Slater [Fri, 21 Dec 2018 12:55:24 +0000 (12:55 +0000)]
imagery: fix typo

14 months agoimagery: limit mapserv by CPU time
Grant Slater [Fri, 21 Dec 2018 12:53:24 +0000 (12:53 +0000)]
imagery: limit mapserv by CPU time

Use CPU time as a poor mans process limit, to kill process before it has leaked
too much memory. Memory limits do not seem to kill the process.

14 months agosystemd: Add LimitCPU support
Grant Slater [Fri, 21 Dec 2018 12:52:49 +0000 (12:52 +0000)]
systemd: Add LimitCPU support

14 months agoimagery: use limit_as on service
Grant Slater [Thu, 20 Dec 2018 22:42:53 +0000 (22:42 +0000)]
imagery: use limit_as on service

14 months agosystemd: add limitAS support
Grant Slater [Thu, 20 Dec 2018 22:42:08 +0000 (22:42 +0000)]
systemd: add limitAS support

14 months agoimagery: enable ubuntugis-unstable repo
Grant Slater [Thu, 20 Dec 2018 16:52:26 +0000 (16:52 +0000)]
imagery: enable ubuntugis-unstable repo

14 months agoimagery: remove legacy cleanup
Grant Slater [Thu, 20 Dec 2018 16:51:55 +0000 (16:51 +0000)]
imagery: remove legacy cleanup

14 months agoimagery: gb_os_sv disable diff layer by default
Grant Slater [Thu, 20 Dec 2018 16:35:09 +0000 (16:35 +0000)]
imagery: gb_os_sv disable diff layer by default

14 months agoimagery: mapserver connection defer
Grant Slater [Thu, 20 Dec 2018 16:34:29 +0000 (16:34 +0000)]
imagery: mapserver connection defer

14 months agoimagery: switch from multiwatch to seperate daemons
Grant Slater [Thu, 20 Dec 2018 15:28:39 +0000 (15:28 +0000)]
imagery: switch from multiwatch to seperate daemons

14 months agoimagery: ignore client about fastcgi side
Grant Slater [Wed, 19 Dec 2018 17:23:17 +0000 (17:23 +0000)]
imagery: ignore client about fastcgi side

14 months agoimagery: use multiple socket balancing
Grant Slater [Wed, 19 Dec 2018 17:12:57 +0000 (17:12 +0000)]
imagery: use multiple socket balancing

14 months agoimagery: do not fail socket upstreams
Grant Slater [Wed, 19 Dec 2018 15:55:28 +0000 (15:55 +0000)]
imagery: do not fail socket upstreams

14 months agoimagery: fix NA imagery properties
Grant Slater [Wed, 19 Dec 2018 13:19:51 +0000 (13:19 +0000)]
imagery: fix NA imagery properties

14 months agoimagery: Fix cookbook typo
Grant Slater [Wed, 19 Dec 2018 13:10:37 +0000 (13:10 +0000)]
imagery: Fix cookbook typo

14 months agoimagery: Add Namibian topo (pending GoFundMe target)
Grant Slater [Wed, 19 Dec 2018 13:07:51 +0000 (13:07 +0000)]
imagery: Add Namibian topo (pending GoFundMe target)

14 months agoDon't check disks in SLEEP or STANDBY mode
Tom Hughes [Tue, 18 Dec 2018 11:22:39 +0000 (11:22 +0000)]
Don't check disks in SLEEP or STANDBY mode

14 months agoEnable FTP helper
Grant Slater [Fri, 14 Dec 2018 18:10:23 +0000 (18:10 +0000)]
Enable FTP helper

14 months agoAdd helper support to firewall_rule
Grant Slater [Fri, 14 Dec 2018 18:10:12 +0000 (18:10 +0000)]
Add helper support to firewall_rule

14 months agoRemove FTP pasv port restrictions
Grant Slater [Fri, 14 Dec 2018 17:29:36 +0000 (17:29 +0000)]
Remove FTP pasv port restrictions

14 months agoFTP enable local perm for ftp users
Grant Slater [Fri, 14 Dec 2018 17:24:18 +0000 (17:24 +0000)]
FTP enable local perm for ftp users

14 months agoSwitch to custom PAM file for FTP
Grant Slater [Fri, 14 Dec 2018 17:00:34 +0000 (17:00 +0000)]
Switch to custom PAM file for FTP

14 months agoFix ftp shorewall action
Grant Slater [Fri, 14 Dec 2018 16:34:22 +0000 (16:34 +0000)]
Fix ftp shorewall action

14 months agoAdd basic FTP daemon to angor
Grant Slater [Fri, 14 Dec 2018 16:14:58 +0000 (16:14 +0000)]
Add basic FTP daemon to angor

14 months agoAdd ssh key for daveh
Tom Hughes [Fri, 14 Dec 2018 10:05:26 +0000 (10:05 +0000)]
Add ssh key for daveh

14 months agoFix munin replication plugin to work with osmium based state
Tom Hughes [Wed, 12 Dec 2018 20:22:57 +0000 (20:22 +0000)]
Fix munin replication plugin to work with osmium based state

14 months agoSwitch tile servers to use osmium for fetching diffs
Tom Hughes [Wed, 12 Dec 2018 19:04:23 +0000 (19:04 +0000)]
Switch tile servers to use osmium for fetching diffs

14 months agoAdd ramoth OOB to dhcp config
Tom Hughes [Sat, 8 Dec 2018 17:04:43 +0000 (17:04 +0000)]
Add ramoth OOB to dhcp config

14 months agoRemove database slave role from ramoth
Tom Hughes [Sat, 8 Dec 2018 16:53:17 +0000 (16:53 +0000)]
Remove database slave role from ramoth

14 months agoUpdate ramoth eth interfaces
Grant Slater [Sat, 8 Dec 2018 16:10:28 +0000 (16:10 +0000)]
Update ramoth eth interfaces

14 months agoDeploy 2019.stateofthemap.org
Tom Hughes [Sat, 8 Dec 2018 15:17:23 +0000 (15:17 +0000)]
Deploy 2019.stateofthemap.org

14 months agoUpdate IP addresses for pyrene
Tom Hughes [Wed, 5 Dec 2018 19:19:40 +0000 (19:19 +0000)]
Update IP addresses for pyrene

14 months agoExempt wikibase redirects from being rewritten to wiki pages
Tom Hughes [Wed, 28 Nov 2018 22:48:31 +0000 (22:48 +0000)]
Exempt wikibase redirects from being rewritten to wiki pages

14 months agoMerge remote-tracking branch 'github/pull/207'
Tom Hughes [Wed, 28 Nov 2018 21:10:07 +0000 (21:10 +0000)]
Merge remote-tracking branch 'github/pull/207'

14 months agoAdd Apache redirects for wiki
Yuri Astrakhan [Wed, 28 Nov 2018 18:21:58 +0000 (13:21 -0500)]
Add Apache redirects for wiki

These redirects allow proper Wikidata Query Service linking,
same as implemented on WMF sites.

14 months agoTry to fix OTRS queuing
Tom Hughes [Sun, 25 Nov 2018 20:22:20 +0000 (20:22 +0000)]
Try to fix OTRS queuing

14 months agoUpdate to use otrs.Console.pl for mail queue injection
Tom Hughes [Sun, 25 Nov 2018 19:04:26 +0000 (19:04 +0000)]
Update to use otrs.Console.pl for mail queue injection

Closes #205

14 months agoAdd a queue for the MWG on OTRS
Paul Norman [Sun, 25 Nov 2018 17:29:16 +0000 (09:29 -0800)]
Add a queue for the MWG on OTRS

14 months agoInstall zlib1g-dev for nokogiri
Tom Hughes [Sat, 24 Nov 2018 11:44:52 +0000 (11:44 +0000)]
Install zlib1g-dev for nokogiri

15 months agoUpdate carto stylesheet to v4.17.0
Tom Hughes [Fri, 23 Nov 2018 19:08:47 +0000 (19:08 +0000)]
Update carto stylesheet to v4.17.0

Closes #204

15 months agoUpdate piwik to 3.7.0
Tom Hughes [Tue, 20 Nov 2018 00:22:40 +0000 (00:22 +0000)]
Update piwik to 3.7.0

15 months agoremoving non-functional web page from allowed external images
Tigerfell [Mon, 19 Nov 2018 21:43:10 +0000 (22:43 +0100)]
removing non-functional web page from allowed external images

15 months agoSet a long timeout for dev instances proxying to cgimap
Tom Hughes [Mon, 19 Nov 2018 19:10:03 +0000 (19:10 +0000)]
Set a long timeout for dev instances proxying to cgimap

15 months agoUpdate bundle
Tom Hughes [Mon, 19 Nov 2018 19:09:56 +0000 (19:09 +0000)]
Update bundle

15 months agoMerge remote-tracking branch 'github/pull/202'
Tom Hughes [Mon, 19 Nov 2018 18:53:05 +0000 (18:53 +0000)]
Merge remote-tracking branch 'github/pull/202'

15 months agoadding automatic double redirect resolution
Tigerfell [Sun, 18 Nov 2018 20:26:46 +0000 (21:26 +0100)]
adding automatic double redirect resolution

15 months agoUpdate CiviCRM extensions to latest versions
Tom Hughes [Mon, 5 Nov 2018 11:25:24 +0000 (11:25 +0000)]
Update CiviCRM extensions to latest versions

15 months agoUpdate CiviCRM to 5.6.1
Tom Hughes [Mon, 5 Nov 2018 11:22:56 +0000 (11:22 +0000)]
Update CiviCRM to 5.6.1

15 months agoRun a job queue runner for each rails instance
Tom Hughes [Thu, 1 Nov 2018 19:06:21 +0000 (19:06 +0000)]
Run a job queue runner for each rails instance

Closes #201

15 months agoFix log rotation for dev apis
Tom Hughes [Wed, 31 Oct 2018 22:36:44 +0000 (22:36 +0000)]
Fix log rotation for dev apis

15 months agoAdded support for enableEntitySearchUI
Yuri Astrakhan [Sun, 28 Oct 2018 14:27:39 +0000 (10:27 -0400)]
Added support for enableEntitySearchUI

This feature will become available in v1.33. For now,
we continue using a nasty hack that should be removed as soon as
we migrate.

The current nasty hack:
  $wgResourceModules['wikibase.ui.entitysearch']['scripts'] = [];

Until then, it's a noop.

16 months agoUpdate carto stylesheet to v4.16.0
Tom Hughes [Fri, 19 Oct 2018 18:06:31 +0000 (19:06 +0100)]
Update carto stylesheet to v4.16.0

Closes #199

16 months agoAllow an optional .json extension on cgimap methods
Tom Hughes [Fri, 19 Oct 2018 17:58:12 +0000 (18:58 +0100)]
Allow an optional .json extension on cgimap methods

16 months agoAdd --enable-yajl when configuring cgimap
Tom Hughes [Fri, 19 Oct 2018 16:10:21 +0000 (17:10 +0100)]
Add --enable-yajl when configuring cgimap

16 months agoUpdate piwik to 3.6.1
Tom Hughes [Fri, 19 Oct 2018 15:53:18 +0000 (16:53 +0100)]
Update piwik to 3.6.1

16 months agoIncrease memory and disk cache size on jakelong
Tom Hughes [Thu, 18 Oct 2018 07:33:33 +0000 (08:33 +0100)]
Increase memory and disk cache size on jakelong

16 months agoRun composer for CirrusSearch
Tom Hughes [Sun, 14 Oct 2018 21:12:45 +0000 (22:12 +0100)]
Run composer for CirrusSearch

16 months agoRevert "Add Maps extension to the main wiki"
Tom Hughes [Sun, 14 Oct 2018 21:00:48 +0000 (22:00 +0100)]
Revert "Add Maps extension to the main wiki"

This reverts commit 5da3b1f59799cbc1283e79598a39c2715ba70fc4.

16 months agoAdd Maps extension to the main wiki
Tom Hughes [Sun, 14 Oct 2018 18:51:45 +0000 (19:51 +0100)]
Add Maps extension to the main wiki

16 months agoUpdate CiviCRM to 5.6.0
Tom Hughes [Sun, 14 Oct 2018 14:19:59 +0000 (15:19 +0100)]
Update CiviCRM to 5.6.0

16 months agoUse a letsencrypt certificate for the main mail server
Tom Hughes [Fri, 5 Oct 2018 18:10:10 +0000 (19:10 +0100)]
Use a letsencrypt certificate for the main mail server

16 months agoAdd optimised gnutls cipher string to SSL cookbook and use it for exim
Tom Hughes [Fri, 5 Oct 2018 15:09:20 +0000 (16:09 +0100)]
Add optimised gnutls cipher string to SSL cookbook and use it for exim

16 months agoImprove SMTP cipher selection
Tom Hughes [Fri, 5 Oct 2018 14:47:45 +0000 (15:47 +0100)]
Improve SMTP cipher selection

16 months agoPrefer server cipher ordering for SMTP
Tom Hughes [Fri, 5 Oct 2018 14:22:58 +0000 (15:22 +0100)]
Prefer server cipher ordering for SMTP

16 months agoDisable RC4, MD5 and SHA1 for SMTP encryption
Tom Hughes [Fri, 5 Oct 2018 14:22:24 +0000 (15:22 +0100)]
Disable RC4, MD5 and SHA1 for SMTP encryption

16 months agoRedirect all HTTP except openstreetmap.org straight to www
Tom Hughes [Fri, 5 Oct 2018 14:02:04 +0000 (15:02 +0100)]
Redirect all HTTP except openstreetmap.org straight to www

16 months agoDisable SSLv3 for SMTP connections
Tom Hughes [Fri, 5 Oct 2018 11:14:35 +0000 (12:14 +0100)]
Disable SSLv3 for SMTP connections

16 months agoUpdate IP addresses for jakelong
Tom Hughes [Wed, 3 Oct 2018 20:06:56 +0000 (21:06 +0100)]
Update IP addresses for jakelong

16 months agoRestore redirect from http://openstreetmap.org to https://openstreetmap.org
Tom Hughes [Tue, 2 Oct 2018 21:26:17 +0000 (22:26 +0100)]
Restore redirect from openstreetmap.org to https://openstreetmap.org

This is necessary for HSTS preload - we cannot redirect directly
to the www.openstreetmap.org name!

16 months agoDon't configure a flood_stage watermark for elasticsearch 5.x
Tom Hughes [Mon, 1 Oct 2018 21:43:34 +0000 (22:43 +0100)]
Don't configure a flood_stage watermark for elasticsearch 5.x

16 months agoUse java 8 for logstash
Tom Hughes [Mon, 1 Oct 2018 18:26:00 +0000 (19:26 +0100)]
Use java 8 for logstash

16 months agoUpdate elasticsearch configuraiton for 6.x
Tom Hughes [Mon, 1 Oct 2018 18:02:55 +0000 (19:02 +0100)]
Update elasticsearch configuraiton for 6.x

16 months agoUpgrade logstash to the 6.x release stream
Tom Hughes [Mon, 1 Oct 2018 17:37:56 +0000 (18:37 +0100)]
Upgrade logstash to the 6.x release stream