chef.git
21 months agoInstall GeoLite2 databases on rails machines
Tom Hughes [Wed, 1 Jan 2020 18:41:19 +0000 (18:41 +0000)]
Install GeoLite2 databases on rails machines

21 months agoDrop forced upgrade of geoipupdate
Tom Hughes [Wed, 1 Jan 2020 16:47:53 +0000 (16:47 +0000)]
Drop forced upgrade of geoipupdate

21 months agoUse MaxMind PPA for geoipupdate and configure account credentials
Tom Hughes [Wed, 1 Jan 2020 16:13:34 +0000 (16:13 +0000)]
Use MaxMind PPA for geoipupdate and configure account credentials

21 months agoForce upgrade of squid to 4.9 on tile caches
Tom Hughes [Wed, 1 Jan 2020 14:05:15 +0000 (14:05 +0000)]
Force upgrade of squid to 4.9 on tile caches

21 months agoput pummelzacken back in production mode
Sarah Hoffmann [Sat, 28 Dec 2019 08:25:25 +0000 (09:25 +0100)]
put pummelzacken back in production mode

21 months agoVersion bump civicrm mailchimp
Guillaume RISCHARD [Thu, 26 Dec 2019 21:23:55 +0000 (22:23 +0100)]
Version bump civicrm mailchimp

21 months agoVersion bump
Guillaume RISCHARD [Thu, 26 Dec 2019 20:25:54 +0000 (21:25 +0100)]
Version bump

21 months agoCiviCRM version: take a step back to leap forward
Guillaume RISCHARD [Thu, 26 Dec 2019 19:56:11 +0000 (20:56 +0100)]
CiviCRM version: take a step back to leap forward

21 months agoVersion bump and uninstall stripe (unused)
Guillaume RISCHARD [Thu, 26 Dec 2019 18:40:41 +0000 (19:40 +0100)]
Version bump and uninstall stripe (unused)

22 months agoSwitch default qdisc to fq
Grant Slater [Mon, 23 Dec 2019 16:52:43 +0000 (16:52 +0000)]
Switch default qdisc to fq

22 months agomunin: standard indenting in apache config (style only)
Grant Slater [Mon, 23 Dec 2019 16:01:49 +0000 (16:01 +0000)]
munin: standard indenting in apache config (style only)

22 months agoudev tune DELL PERC H710 scheduler
Grant Slater [Mon, 23 Dec 2019 15:59:13 +0000 (15:59 +0000)]
udev tune DELL PERC H710 scheduler

22 months agotile: Use TCP BBR congestion control
Grant Slater [Mon, 23 Dec 2019 13:25:40 +0000 (13:25 +0000)]
tile: Use TCP BBR congestion control

22 months agotilecache: Use TCP BBR congestion control
Grant Slater [Mon, 23 Dec 2019 13:15:14 +0000 (13:15 +0000)]
tilecache: Use TCP BBR congestion control

22 months agopummelzacken: increase effective_io_concurrency
Sarah Hoffmann [Sun, 22 Dec 2019 16:12:53 +0000 (17:12 +0100)]
pummelzacken: increase effective_io_concurrency

22 months agoswitch postgresql to 12 on pummelzacken
Sarah Hoffmann [Sun, 22 Dec 2019 15:49:48 +0000 (16:49 +0100)]
switch postgresql to 12 on pummelzacken

22 months agoput pummelzacken in import mode
Sarah Hoffmann [Sun, 22 Dec 2019 15:44:45 +0000 (16:44 +0100)]
put pummelzacken in import mode

22 months agotilecache: disable TCP slow start
Grant Slater [Fri, 20 Dec 2019 17:04:34 +0000 (17:04 +0000)]
tilecache: disable TCP slow start

22 months agoReplace dnsbl-3.uceprotect.net with dnsbl-2.uceprotect.net
Tom Hughes [Thu, 12 Dec 2019 15:45:22 +0000 (15:45 +0000)]
Replace dnsbl-3.uceprotect.net with dnsbl-2.uceprotect.net

22 months agoAdd use noop scheduler for OCZ-VERTEX3
Grant Slater [Mon, 9 Dec 2019 22:35:30 +0000 (22:35 +0000)]
Add use noop scheduler for OCZ-VERTEX3

22 months agostateofthemap: add reasonable expiry headers
Grant Slater [Sun, 8 Dec 2019 20:26:03 +0000 (20:26 +0000)]
stateofthemap: add reasonable expiry headers

22 months agoswitch2osm: add expiry matching github pages
Grant Slater [Sun, 8 Dec 2019 19:51:49 +0000 (19:51 +0000)]
switch2osm: add expiry matching github pages

22 months agoimagery: return cache status
Grant Slater [Sun, 8 Dec 2019 19:37:21 +0000 (19:37 +0000)]
imagery: return cache status

22 months agoimagery: backport nginx caching improvements
Grant Slater [Sun, 8 Dec 2019 19:13:05 +0000 (19:13 +0000)]
imagery: backport nginx caching improvements

22 months agoimagery: use nginx tcp_nopush default
Grant Slater [Sun, 8 Dec 2019 18:58:17 +0000 (18:58 +0000)]
imagery: use nginx tcp_nopush default

22 months agotilecache: Use full local port range
Grant Slater [Sun, 8 Dec 2019 18:52:43 +0000 (18:52 +0000)]
tilecache: Use full local port range

22 months agotilecache: use conditional validation upstream
Grant Slater [Sun, 8 Dec 2019 18:52:13 +0000 (18:52 +0000)]
tilecache: use conditional validation upstream

22 months agoIncrease some tilecaches nginx cache
Grant Slater [Sun, 8 Dec 2019 16:23:16 +0000 (16:23 +0000)]
Increase some tilecaches nginx cache

22 months agoAdd additional emails to .mailmap
Grant Slater [Sun, 8 Dec 2019 15:45:39 +0000 (15:45 +0000)]
Add additional emails to .mailmap

22 months agotilecache: proxy buffer large enough for full tile
Grant Slater [Sat, 7 Dec 2019 18:42:08 +0000 (18:42 +0000)]
tilecache: proxy buffer large enough for full tile

22 months agotilecache: switch nginx upstream to squid port 8080
Grant Slater [Sat, 7 Dec 2019 18:40:40 +0000 (18:40 +0000)]
tilecache: switch nginx upstream to squid port 8080

22 months agoConfigure weighted plugin for gdnsd
Tom Hughes [Fri, 6 Dec 2019 09:18:12 +0000 (09:18 +0000)]
Configure weighted plugin for gdnsd

22 months agoEnable SNMP access to naga
Tom Hughes [Wed, 4 Dec 2019 10:13:52 +0000 (10:13 +0000)]
Enable SNMP access to naga

22 months agosquid: use a short shutdown_lifetime
Grant Slater [Tue, 3 Dec 2019 23:28:21 +0000 (23:28 +0000)]
squid: use a short shutdown_lifetime

22 months agosquid: use systemd killmode mixed
Grant Slater [Tue, 3 Dec 2019 22:25:48 +0000 (22:25 +0000)]
squid: use systemd killmode mixed

Move closer to upstream systemd config
See: https://github.com/squid-cache/squid/commit/d00e0e6d26acbd4c0c5e7b51f6b2900513282456#diff-d29c313433f1723d0bdd9664221014db

22 months agosystemd: add killmode support
Grant Slater [Tue, 3 Dec 2019 22:23:48 +0000 (22:23 +0000)]
systemd: add killmode support

22 months agoAdd role for naga
Tom Hughes [Tue, 3 Dec 2019 19:24:19 +0000 (19:24 +0000)]
Add role for naga

22 months agoRemove unused role
Tom Hughes [Tue, 3 Dec 2019 19:16:30 +0000 (19:16 +0000)]
Remove unused role

22 months agontp: allow large steps on VMs
Grant Slater [Mon, 2 Dec 2019 20:00:23 +0000 (20:00 +0000)]
ntp: allow large steps on VMs

22 months agontp: allow anytime time step on VMs
Grant Slater [Mon, 2 Dec 2019 16:26:32 +0000 (16:26 +0000)]
ntp: allow anytime time step on VMs

22 months agotimesync - fix action typo
Grant Slater [Sun, 1 Dec 2019 17:27:14 +0000 (17:27 +0000)]
timesync - fix action typo

22 months agoForceful open-vm-tools timeSync disable
Grant Slater [Sun, 1 Dec 2019 17:22:21 +0000 (17:22 +0000)]
Forceful open-vm-tools timeSync disable

22 months agoDisable host time sync on VMware guests
Grant Slater [Sun, 1 Dec 2019 16:57:40 +0000 (16:57 +0000)]
Disable host time sync on VMware guests

22 months agosupybot: add switch2osm
Grant Slater [Sun, 1 Dec 2019 16:27:29 +0000 (16:27 +0000)]
supybot: add switch2osm

22 months agoserverinfo: fix copy/paste error
Grant Slater [Sun, 1 Dec 2019 16:18:18 +0000 (16:18 +0000)]
serverinfo: fix copy/paste error

22 months agoserverinfo: Use bundler to run jekyll
Grant Slater [Sun, 1 Dec 2019 16:14:22 +0000 (16:14 +0000)]
serverinfo: Use bundler to run jekyll

22 months agoInstall open-vm-tools on VMware guests
Grant Slater [Sun, 1 Dec 2019 15:51:38 +0000 (15:51 +0000)]
Install open-vm-tools on VMware guests

22 months agonominatim: keep update logs for a year
Sarah Hoffmann [Sun, 1 Dec 2019 14:53:25 +0000 (15:53 +0100)]
nominatim: keep update logs for a year

22 months agoswitch2osm: add 404 handler page
Grant Slater [Thu, 28 Nov 2019 00:36:01 +0000 (00:36 +0000)]
switch2osm: add 404 handler page

22 months agoRevert "switch2osm: add temporary workaround until for missing config"
Grant Slater [Thu, 28 Nov 2019 00:21:34 +0000 (00:21 +0000)]
Revert "switch2osm: add temporary workaround until for missing config"

This reverts commit 7a3a01f710421e67b96dfebd5a51c4374be73035.

22 months agoUpdate piwik to 3.13.0
Tom Hughes [Thu, 28 Nov 2019 00:18:02 +0000 (00:18 +0000)]
Update piwik to 3.13.0

22 months agoswitch2osm: add temporary workaround until for missing config
Grant Slater [Wed, 27 Nov 2019 23:45:09 +0000 (23:45 +0000)]
switch2osm: add temporary workaround until for missing config

22 months agoswitch2osm: use override config to fix site name
Grant Slater [Wed, 27 Nov 2019 23:37:37 +0000 (23:37 +0000)]
switch2osm: use override config to fix site name

22 months agoSwitch 2 new switch2osm.org site
Grant Slater [Wed, 27 Nov 2019 22:42:36 +0000 (22:42 +0000)]
Switch 2 new switch2osm.org site

22 months agoUpdate virtio_blk udev with note
Grant Slater [Wed, 27 Nov 2019 18:32:55 +0000 (18:32 +0000)]
Update virtio_blk udev with note

22 months agoFix device model for VMware
Grant Slater [Wed, 27 Nov 2019 18:20:56 +0000 (18:20 +0000)]
Fix device model for VMware

22 months agoTune scheduler and read_ahead_kb on VMware and KVM
Grant Slater [Wed, 27 Nov 2019 17:55:18 +0000 (17:55 +0000)]
Tune scheduler and read_ahead_kb on VMware and KVM

22 months agoUpdate cookstyle todo
Tom Hughes [Tue, 26 Nov 2019 22:25:36 +0000 (22:25 +0000)]
Update cookstyle todo

22 months agoFix cookstyle warning
Tom Hughes [Tue, 26 Nov 2019 22:21:53 +0000 (22:21 +0000)]
Fix cookstyle warning

22 months agoUpdate bundle
Tom Hughes [Tue, 26 Nov 2019 22:19:47 +0000 (22:19 +0000)]
Update bundle

22 months agolongma: move squid completely to new disk
Grant Slater [Tue, 26 Nov 2019 09:39:26 +0000 (09:39 +0000)]
longma: move squid completely to new disk

22 months agolongma: use new store.new-san mount
Grant Slater [Tue, 26 Nov 2019 00:47:16 +0000 (00:47 +0000)]
longma: use new store.new-san mount

22 months agosquid: make version 4 default
Grant Slater [Tue, 26 Nov 2019 00:40:22 +0000 (00:40 +0000)]
squid: make version 4 default

22 months agoRevert "tilecache: Use squid standby connections"
Grant Slater [Mon, 25 Nov 2019 23:07:44 +0000 (23:07 +0000)]
Revert "tilecache: Use squid standby connections"

This reverts commit 2cd52dc46c86cc311b6961163708a771ea4e30ef.

22 months agosquid: also listen on secondary port 8080
Grant Slater [Mon, 25 Nov 2019 22:26:29 +0000 (22:26 +0000)]
squid: also listen on secondary port 8080

22 months agotilecache: tweak squid refresh_pattern
Grant Slater [Mon, 25 Nov 2019 22:22:04 +0000 (22:22 +0000)]
tilecache: tweak squid refresh_pattern

22 months agotilecache: allow nginx to fallback to other caches
Grant Slater [Mon, 25 Nov 2019 22:19:11 +0000 (22:19 +0000)]
tilecache: allow nginx to fallback to other caches

22 months agosquid: force restart on config change. Reload unsafe
Grant Slater [Mon, 25 Nov 2019 22:17:12 +0000 (22:17 +0000)]
squid: force restart on config change. Reload unsafe

22 months agosquid: tune number workers cpu
Grant Slater [Mon, 25 Nov 2019 21:08:23 +0000 (21:08 +0000)]
squid: tune number workers cpu

22 months agosquid: use manager port mgr:counters
Grant Slater [Mon, 25 Nov 2019 20:47:48 +0000 (20:47 +0000)]
squid: use manager port mgr:counters

22 months agoAdd units to dns_packet_max directive
Tom Hughes [Mon, 25 Nov 2019 07:06:36 +0000 (07:06 +0000)]
Add units to dns_packet_max directive

23 months agoAllow AF_INET6 for squid
Tom Hughes [Sun, 24 Nov 2019 22:35:06 +0000 (22:35 +0000)]
Allow AF_INET6 for squid

23 months agosquid: DNS tuning
Grant Slater [Sun, 24 Nov 2019 22:32:18 +0000 (22:32 +0000)]
squid: DNS tuning

23 months agotilecache: fix limit supported request methods
Grant Slater [Sun, 24 Nov 2019 20:52:24 +0000 (20:52 +0000)]
tilecache: fix limit supported request methods

23 months agotilecache: limit supported request methods
Grant Slater [Sun, 24 Nov 2019 20:44:36 +0000 (20:44 +0000)]
tilecache: limit supported request methods

23 months agoDrop rails6 test site
Tom Hughes [Sun, 24 Nov 2019 19:27:59 +0000 (19:27 +0000)]
Drop rails6 test site

23 months agoAdd a systemd-resolved FallbackDNS list
Grant Slater [Sat, 23 Nov 2019 14:58:04 +0000 (14:58 +0000)]
Add a systemd-resolved FallbackDNS list

The default in systemd for ubuntu in 18.04 is an empty fallback
list.

Use a reasonable list:

* Cloudflare (https://1.1.1.1/)
* Quad9 without filtering (https://www.quad9.net/)
* Google (https://developers.google.com/speed/public-dns/)
1.1.1.1
9.9.9.10
8.8.8.8
2606:4700:4700::1111
2620:fe::10
2001:4860:4860::8888

List from https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/systemd#n103

23 months agoCleanup Dockerfile used for linting
Grant Slater [Sat, 23 Nov 2019 14:56:34 +0000 (14:56 +0000)]
Cleanup Dockerfile used for linting

23 months agoTell browsers they can use stale tiles
Tom Hughes [Fri, 22 Nov 2019 17:06:59 +0000 (17:06 +0000)]
Tell browsers they can use stale tiles

23 months agotilecache: restrict cache control headers to osm.org only
Grant Slater [Fri, 22 Nov 2019 15:53:12 +0000 (15:53 +0000)]
tilecache: restrict cache control headers to osm.org only

23 months agoRevert "tilecache: restrict cache control headers to osm.org only"
Grant Slater [Fri, 22 Nov 2019 15:45:10 +0000 (15:45 +0000)]
Revert "tilecache: restrict cache control headers to osm.org only"

This reverts commit 672db0ffdbfdec5510c282e7eeb2adc30d535111.

23 months agotilecache: restrict cache control headers to osm.org only
Grant Slater [Fri, 22 Nov 2019 15:29:24 +0000 (15:29 +0000)]
tilecache: restrict cache control headers to osm.org only

23 months agotilecache: remove additional cache poisoning header
Grant Slater [Fri, 22 Nov 2019 15:00:13 +0000 (15:00 +0000)]
tilecache: remove additional cache poisoning header

23 months agotilecache: remove cache poisoning headers
Grant Slater [Fri, 22 Nov 2019 14:37:15 +0000 (14:37 +0000)]
tilecache: remove cache poisoning headers

23 months agonominatim: update link to wikipedia data
Sarah Hoffmann [Wed, 20 Nov 2019 11:15:22 +0000 (12:15 +0100)]
nominatim: update link to wikipedia data

23 months agogorynych: use ssd for tilecache
Grant Slater [Tue, 19 Nov 2019 21:04:25 +0000 (21:04 +0000)]
gorynych: use ssd for tilecache

23 months agotilecache: balance localhost backend
Grant Slater [Tue, 19 Nov 2019 20:35:23 +0000 (20:35 +0000)]
tilecache: balance localhost backend

23 months agotilecache: allow TCP tw reuse
Grant Slater [Tue, 19 Nov 2019 20:32:34 +0000 (20:32 +0000)]
tilecache: allow TCP tw reuse

23 months agoAdd standard gitconfig for user grant
Grant Slater [Sun, 17 Nov 2019 17:02:07 +0000 (17:02 +0000)]
Add standard gitconfig for user grant

23 months agotilecache: Fix logrotate erb typo
Grant Slater [Sun, 17 Nov 2019 16:13:06 +0000 (16:13 +0000)]
tilecache: Fix logrotate erb typo

23 months agoReduce memory cache size on necrosan
Tom Hughes [Sun, 17 Nov 2019 16:02:48 +0000 (16:02 +0000)]
Reduce memory cache size on necrosan

23 months agotilecache: compress logs with multiple threads
Grant Slater [Sun, 17 Nov 2019 15:56:33 +0000 (15:56 +0000)]
tilecache: compress logs with multiple threads

23 months agoBetter CPU/IO scheduling for cron on tilecaches
Grant Slater [Sun, 17 Nov 2019 15:16:39 +0000 (15:16 +0000)]
Better CPU/IO scheduling for cron on tilecaches

23 months agoReduce memory cache size on sarkany
Tom Hughes [Fri, 15 Nov 2019 09:36:21 +0000 (09:36 +0000)]
Reduce memory cache size on sarkany

23 months agoIncrease CPU temperature warning thresholds on rhaegal
Tom Hughes [Thu, 14 Nov 2019 21:13:16 +0000 (21:13 +0000)]
Increase CPU temperature warning thresholds on rhaegal

23 months agoRemount /dev/shm if the size is changed
Tom Hughes [Thu, 14 Nov 2019 20:43:55 +0000 (20:43 +0000)]
Remount /dev/shm if the size is changed

23 months agoRemvoe temporary hack to restart squid after /dev/shm remount
Tom Hughes [Thu, 14 Nov 2019 20:39:19 +0000 (20:39 +0000)]
Remvoe temporary hack to restart squid after /dev/shm remount

23 months agoRestart squid if /dev/shm entries are missing
Tom Hughes [Tue, 12 Nov 2019 13:46:52 +0000 (13:46 +0000)]
Restart squid if /dev/shm entries are missing

23 months agoDon't remount /dev/shm on change
Tom Hughes [Tue, 12 Nov 2019 13:41:50 +0000 (13:41 +0000)]
Don't remount /dev/shm on change

The chef remount action actually does unmount+mount not remount
and triggers unconditionally.

23 months agoIncrease shared memory limit on various caches
Tom Hughes [Tue, 12 Nov 2019 09:04:40 +0000 (09:04 +0000)]
Increase shared memory limit on various caches