]>
git.openstreetmap.org Git - chef.git/log
Grant Slater [Thu, 24 Nov 2022 03:23:59 +0000 (03:23 +0000)]
Remove traces of errol
Tom Hughes [Thu, 24 Nov 2022 00:59:48 +0000 (00:59 +0000)]
Relax sandboxing for the web-statistics service
Tom Hughes [Wed, 23 Nov 2022 22:23:47 +0000 (22:23 +0000)]
Drop cleanup code
Tom Hughes [Wed, 23 Nov 2022 22:18:04 +0000 (22:18 +0000)]
Switch wiki dumps to use systemd timers
Tom Hughes [Wed, 23 Nov 2022 20:26:54 +0000 (20:26 +0000)]
Switch web statistics to use a systemd timer
Tom Hughes [Wed, 23 Nov 2022 19:05:31 +0000 (19:05 +0000)]
Switch tile cleanup to use a systemd timer
Grant Slater [Wed, 23 Nov 2022 16:16:32 +0000 (16:16 +0000)]
wiki: set custom wgWBClientSettings['repoSiteName']
Per: https://github.com/openstreetmap/chef/pull/523
Closes: https://github.com/openstreetmap/operations/issues/352
Tom Hughes [Wed, 23 Nov 2022 12:52:29 +0000 (12:52 +0000)]
Disable gravatar and enable secure cookies for grafana
Tom Hughes [Wed, 23 Nov 2022 09:57:59 +0000 (09:57 +0000)]
Remove cleanup code
Tom Hughes [Tue, 22 Nov 2022 22:40:39 +0000 (22:40 +0000)]
Drop unused code for managing reqtimeout module
Tom Hughes [Tue, 22 Nov 2022 22:11:56 +0000 (22:11 +0000)]
Switch to using nodesource repos for nodejs
Tom Hughes [Mon, 21 Nov 2022 21:00:45 +0000 (21:00 +0000)]
Make fastly healthcheck alerts operate on a per-service basis
Sarah Hoffmann [Mon, 21 Nov 2022 13:44:34 +0000 (14:44 +0100)]
nominatim: require lua libraries
Sarah Hoffmann [Mon, 21 Nov 2022 13:43:21 +0000 (14:43 +0100)]
nominatim: make forward dependencies configurable
Tom Hughes [Sun, 20 Nov 2022 19:01:44 +0000 (19:01 +0000)]
Add CGI header for cc-by-sa
Tom Hughes [Sun, 20 Nov 2022 18:51:20 +0000 (18:51 +0000)]
Increase ServerLimit on planet to allow for some terminating workers
Grant Slater [Sun, 20 Nov 2022 08:29:53 +0000 (08:29 +0000)]
community: activate CDN
Grant Slater [Fri, 18 Nov 2022 00:17:14 +0000 (00:17 +0000)]
community: disable STARTTLS validation for the moment
Grant Slater [Thu, 17 Nov 2022 23:34:00 +0000 (23:34 +0000)]
community: use faffy for mail relay
Grant Slater [Thu, 17 Nov 2022 22:39:04 +0000 (22:39 +0000)]
wiki: Add wikibase dump
Tom Hughes [Thu, 17 Nov 2022 18:49:12 +0000 (18:49 +0000)]
Use default sandboxing for mapserv services
Tom Hughes [Wed, 16 Nov 2022 20:26:32 +0000 (20:26 +0000)]
Use default sandboxing for the oxidized service
Tom Hughes [Wed, 16 Nov 2022 19:52:57 +0000 (19:52 +0000)]
Restart karma if the service definition changes
Tom Hughes [Wed, 16 Nov 2022 19:48:01 +0000 (19:48 +0000)]
Fix rails-jobs restart trigger
Tom Hughes [Wed, 16 Nov 2022 19:41:17 +0000 (19:41 +0000)]
Use default sandboxing for API statistics and rails job runners
Tom Hughes [Wed, 16 Nov 2022 19:03:45 +0000 (19:03 +0000)]
Use default sandboxing for some prometheus services
Grant Slater [Wed, 16 Nov 2022 00:37:58 +0000 (00:37 +0000)]
bind: Cleanup internl PTR records. Adding faffy + norbert
Tom Hughes [Tue, 15 Nov 2022 22:44:43 +0000 (22:44 +0000)]
Fix some sandboxing issued for the rails-jobs service
Tom Hughes [Tue, 15 Nov 2022 22:00:50 +0000 (22:00 +0000)]
Add a module label to snmp metrics
Tom Hughes [Tue, 15 Nov 2022 21:30:09 +0000 (21:30 +0000)]
Fix wildcard match for Juniper fan state
Tom Hughes [Tue, 15 Nov 2022 20:41:08 +0000 (20:41 +0000)]
Derive tile directories for sanboxing from attributes
Tom Hughes [Tue, 15 Nov 2022 20:35:01 +0000 (20:35 +0000)]
Tweak some tile sandboxes
Tom Hughes [Tue, 15 Nov 2022 20:26:07 +0000 (20:26 +0000)]
Use default sandboxing for tile services
Tom Hughes [Tue, 15 Nov 2022 19:16:24 +0000 (19:16 +0000)]
Use default sandboxing for tilelog service
Tom Hughes [Tue, 15 Nov 2022 19:04:55 +0000 (19:04 +0000)]
Restart dev service correctly when they change
Tom Hughes [Tue, 15 Nov 2022 19:01:35 +0000 (19:01 +0000)]
Allow AF_UNIX sockets for cgimap
Tom Hughes [Tue, 15 Nov 2022 18:45:34 +0000 (18:45 +0000)]
Use default sandboxing for dev services
Tom Hughes [Tue, 15 Nov 2022 18:39:59 +0000 (18:39 +0000)]
Relax sandboxing to allow JIT for osmosis
Tom Hughes [Tue, 15 Nov 2022 18:31:07 +0000 (18:31 +0000)]
Use default sandboxing for planet replication services
Tom Hughes [Tue, 15 Nov 2022 17:18:35 +0000 (17:18 +0000)]
Treat runningAtFullSpeed as a good state for Juniper fans
Tom Hughes [Tue, 15 Nov 2022 08:27:47 +0000 (08:27 +0000)]
Disable download of Intel SST tool until Intel sort their shit out
Tom Hughes [Tue, 15 Nov 2022 08:27:21 +0000 (08:27 +0000)]
Revert "Update SST CLI"
This reverts commit
d6c3c3bc6b45204974784125bd0843a0b28ce9aa.
Tom Hughes [Tue, 15 Nov 2022 08:21:59 +0000 (08:21 +0000)]
Update SST CLI
Tom Hughes [Mon, 14 Nov 2022 22:48:50 +0000 (22:48 +0000)]
Use default sandboxing for the gps-update service
Grant Slater [Mon, 14 Nov 2022 21:46:58 +0000 (21:46 +0000)]
discourse: upgrade to v2.8.11
Tom Hughes [Mon, 14 Nov 2022 19:25:29 +0000 (19:25 +0000)]
Make update-lowzoom take priority over render-lowzoom
Sarah Hoffmann [Sun, 13 Nov 2022 15:55:35 +0000 (16:55 +0100)]
Revert "Switch to public overpass instance"
This reverts commit
c91319c9056f22e55798efd8e6931bbb49fc43a7.
Sarah Hoffmann [Sat, 12 Nov 2022 21:59:22 +0000 (22:59 +0100)]
switch overpass to lz4 compression
Sarah Hoffmann [Sat, 12 Nov 2022 19:55:53 +0000 (20:55 +0100)]
Switch to public overpass instance
Tom Hughes [Fri, 11 Nov 2022 19:00:06 +0000 (19:00 +0000)]
Merge remote-tracking branch 'github/pull/546'
Tom Hughes [Fri, 11 Nov 2022 13:49:33 +0000 (13:49 +0000)]
Increase timeout for postgres exporter
Sarah Hoffmann [Fri, 11 Nov 2022 08:23:37 +0000 (09:23 +0100)]
overpass: monitor size of diff files
Paul Norman [Fri, 11 Nov 2022 03:00:58 +0000 (19:00 -0800)]
Update to OpenStreetMap Carto v5.6.2
Tom Hughes [Fri, 11 Nov 2022 00:00:35 +0000 (00:00 +0000)]
Merge remote-tracking branch 'github/pull/545'
Paul Norman [Thu, 10 Nov 2022 22:59:46 +0000 (14:59 -0800)]
Specify mapnik version for CartoCSS
OpenStreetMap Carto requires, and we use, at least 3.0.22.
Tom Hughes [Thu, 10 Nov 2022 10:48:06 +0000 (10:48 +0000)]
Increase timeout for postgres exporter
Tom Hughes [Wed, 9 Nov 2022 22:52:16 +0000 (22:52 +0000)]
Use default sandboxing for the gdnsd-reload service
Tom Hughes [Wed, 9 Nov 2022 22:40:35 +0000 (22:40 +0000)]
Use default sandboxing for the geoipupdate service
Tom Hughes [Wed, 9 Nov 2022 22:33:01 +0000 (22:33 +0000)]
Bump norman up to administrator on tile servers
Grant Slater [Wed, 9 Nov 2022 21:20:06 +0000 (21:20 +0000)]
dns: Update dnscontrol to 3.22.1
Tom Hughes [Wed, 9 Nov 2022 20:26:16 +0000 (20:26 +0000)]
Use default sandboxing for the blogs-update service
Tom Hughes [Wed, 9 Nov 2022 19:23:46 +0000 (19:23 +0000)]
Use default sandboxing for the supybot service
Tom Hughes [Tue, 8 Nov 2022 22:52:26 +0000 (22:52 +0000)]
Use default sandboxing for the dns-check service
Tom Hughes [Tue, 8 Nov 2022 22:50:52 +0000 (22:50 +0000)]
Extend systemd_service with support for a default sandbox
Tom Hughes [Tue, 8 Nov 2022 22:49:53 +0000 (22:49 +0000)]
Install libyaml-perl for dns-check
Tom Hughes [Tue, 8 Nov 2022 22:48:11 +0000 (22:48 +0000)]
Canonicalise ordering of array attributes for services
Tom Hughes [Tue, 8 Nov 2022 20:20:25 +0000 (20:20 +0000)]
Add some extra sandboxing options to systemd_service
Tom Hughes [Wed, 9 Nov 2022 15:59:23 +0000 (15:59 +0000)]
Install tar and unzip unconditionally on tile servers
Tom Hughes [Wed, 9 Nov 2022 15:31:04 +0000 (15:31 +0000)]
Configure palulukon as a tile server
Tom Hughes [Wed, 9 Nov 2022 15:19:13 +0000 (15:19 +0000)]
The pg_database metric is now builtin
Tom Hughes [Wed, 9 Nov 2022 15:00:01 +0000 (15:00 +0000)]
Add support for architecture specific prometheus exporters
Tom Hughes [Wed, 9 Nov 2022 13:56:03 +0000 (13:56 +0000)]
Add public address for palulukon
Tom Hughes [Wed, 9 Nov 2022 13:50:19 +0000 (13:50 +0000)]
The mdadm service is now called mdmonitor
Tom Hughes [Wed, 9 Nov 2022 13:41:27 +0000 (13:41 +0000)]
There are Ubuntu 22.04 builds for chef now
Tom Hughes [Wed, 9 Nov 2022 13:33:43 +0000 (13:33 +0000)]
Add role for palulukon
Tom Hughes [Wed, 9 Nov 2022 08:25:15 +0000 (08:25 +0000)]
Fix typo
Grant Slater [Wed, 9 Nov 2022 02:39:00 +0000 (02:39 +0000)]
Give stereo git commit permission
Tom Hughes [Tue, 8 Nov 2022 23:07:25 +0000 (23:07 +0000)]
Add some extra writable paths for planetdump
Tom Hughes [Tue, 8 Nov 2022 21:01:08 +0000 (21:01 +0000)]
Fix for ruby 3.1 compatibility
Tom Hughes [Tue, 8 Nov 2022 20:26:01 +0000 (20:26 +0000)]
Target ruby 3.1 to match chef 18
Tom Hughes [Tue, 8 Nov 2022 17:22:40 +0000 (17:22 +0000)]
Update chef client to 18.0.169
Tom Hughes [Tue, 8 Nov 2022 14:22:11 +0000 (14:22 +0000)]
Remove tiamat roles
Guillaume Rischard [Mon, 7 Nov 2022 17:22:39 +0000 (12:22 -0500)]
Format, add user account request form
Grant Slater [Mon, 7 Nov 2022 16:44:06 +0000 (16:44 +0000)]
imagery: remove old cleanup code
Grant Slater [Mon, 7 Nov 2022 16:43:36 +0000 (16:43 +0000)]
dev: add link to faffy hardware details
Guillaume Rischard [Mon, 7 Nov 2022 16:39:12 +0000 (11:39 -0500)]
Hostname
Sarah Hoffmann [Sat, 5 Nov 2022 09:57:48 +0000 (10:57 +0100)]
update overpass to 0.7.59.1
Tom Hughes [Thu, 3 Nov 2022 22:08:10 +0000 (22:08 +0000)]
Fix allowed paths for tile expiry
Tom Hughes [Thu, 3 Nov 2022 21:52:52 +0000 (21:52 +0000)]
Improve filesystem sandboxing for tile services
Tom Hughes [Thu, 3 Nov 2022 18:19:17 +0000 (18:19 +0000)]
Relax constraints on minutely replication
Tom Hughes [Thu, 3 Nov 2022 18:13:59 +0000 (18:13 +0000)]
Improve filesystem sandboxing for planet replication services
Grant Slater [Thu, 3 Nov 2022 16:12:12 +0000 (16:12 +0000)]
community: Upgrade discourse to 2.8.10
Tom Hughes [Thu, 3 Nov 2022 13:59:04 +0000 (13:59 +0000)]
Drop private_devices for OTRS and planetdump that use exim
Sarah Hoffmann [Thu, 3 Nov 2022 07:35:12 +0000 (08:35 +0100)]
increase alert time for overpass database age
Tom Hughes [Wed, 2 Nov 2022 23:35:02 +0000 (23:35 +0000)]
Correct attribute name
Tom Hughes [Wed, 2 Nov 2022 22:46:07 +0000 (22:46 +0000)]
Improve filesystem sandboxing for some services
Tom Hughes [Wed, 2 Nov 2022 21:17:45 +0000 (21:17 +0000)]
Fix resource attribute name
Tom Hughes [Wed, 2 Nov 2022 20:48:26 +0000 (20:48 +0000)]
Add private_devices to some additional services
Tom Hughes [Wed, 2 Nov 2022 19:27:12 +0000 (19:27 +0000)]
Lock down filesystem access for supybot
Tom Hughes [Wed, 2 Nov 2022 19:23:49 +0000 (19:23 +0000)]
Drop some dead repositories and add planetdump-ng to replace planetdump
projects / chef.git / log