chef.git
9 months agonginx: add munin monitoring
Grant Slater [Thu, 31 Oct 2019 23:13:35 +0000 (23:13 +0000)]
nginx: add munin monitoring

9 months agonominatim: reduce number of rate limited connections
Sarah Hoffmann [Thu, 31 Oct 2019 16:13:39 +0000 (17:13 +0100)]
nominatim: reduce number of rate limited connections

9 months agonominatim: increase apache workers
Sarah Hoffmann [Thu, 31 Oct 2019 08:55:23 +0000 (09:55 +0100)]
nominatim: increase apache workers

9 months agoRevert "nominatim: remove firewall http rate limiting"
Sarah Hoffmann [Thu, 31 Oct 2019 08:54:13 +0000 (09:54 +0100)]
Revert "nominatim: remove firewall http rate limiting"

This reverts commit f2e8efe99b471cd5aef85977e6b22d024151c9a4.

9 months agoReduce squid memory limit on cmok
Grant Slater [Thu, 31 Oct 2019 08:43:19 +0000 (08:43 +0000)]
Reduce squid memory limit on cmok

9 months agonominatim: remove firewall http rate limiting
Sarah Hoffmann [Wed, 30 Oct 2019 23:01:55 +0000 (00:01 +0100)]
nominatim: remove firewall http rate limiting

9 months agotilecache: add cache status to response header
Grant Slater [Wed, 30 Oct 2019 22:46:04 +0000 (22:46 +0000)]
tilecache: add cache status to response header

9 months agoSwitch stormfly-02 to squid 4
Tom Hughes [Wed, 30 Oct 2019 22:30:40 +0000 (22:30 +0000)]
Switch stormfly-02 to squid 4

9 months agoDisallow HTCP access to squid 4 caches
Tom Hughes [Wed, 30 Oct 2019 22:28:31 +0000 (22:28 +0000)]
Disallow HTCP access to squid 4 caches

9 months agotilecache: enable some caching in nginx
Grant Slater [Wed, 30 Oct 2019 22:29:05 +0000 (22:29 +0000)]
tilecache: enable some caching in nginx

9 months agoUpdate piwik to 3.12.0
Tom Hughes [Wed, 30 Oct 2019 00:22:52 +0000 (00:22 +0000)]
Update piwik to 3.12.0

9 months agoUse HTCP for cache peer queries
Tom Hughes [Tue, 29 Oct 2019 22:13:19 +0000 (22:13 +0000)]
Use HTCP for cache peer queries

9 months agoAdd firewall rules for HTCP traffic
Tom Hughes [Tue, 29 Oct 2019 21:31:42 +0000 (21:31 +0000)]
Add firewall rules for HTCP traffic

9 months agoRevert "Reduce squid memory limit on toothless"
Tom Hughes [Tue, 29 Oct 2019 21:17:10 +0000 (21:17 +0000)]
Revert "Reduce squid memory limit on toothless"

This reverts commit 4823cac779fd084d5776b10ef7b0589dec021526.

9 months agoDisallow ICP access to squid 4 caches
Tom Hughes [Tue, 29 Oct 2019 21:15:59 +0000 (21:15 +0000)]
Disallow ICP access to squid 4 caches

9 months agoEnable HTCP on tile caches
Tom Hughes [Tue, 29 Oct 2019 21:14:49 +0000 (21:14 +0000)]
Enable HTCP on tile caches

9 months agoDisable installation of Intel SSD tool
Tom Hughes [Sat, 26 Oct 2019 06:42:04 +0000 (07:42 +0100)]
Disable installation of Intel SSD tool

9 months agonominatim: apply direct blocks to http too
Sarah Hoffmann [Fri, 25 Oct 2019 18:33:56 +0000 (20:33 +0200)]
nominatim: apply direct blocks to http too

9 months agoUpdate hardware cookbook for new version of Intel SSD tool
Tom Hughes [Wed, 23 Oct 2019 07:22:38 +0000 (08:22 +0100)]
Update hardware cookbook for new version of Intel SSD tool

9 months agotilecache: remove overloaded peers
Grant Slater [Tue, 22 Oct 2019 07:40:29 +0000 (08:40 +0100)]
tilecache: remove overloaded peers

9 months agoUpdate bundle
Tom Hughes [Sun, 20 Oct 2019 18:49:27 +0000 (19:49 +0100)]
Update bundle

9 months agoDisable logging of missing languages
Tom Hughes [Sat, 19 Oct 2019 16:52:43 +0000 (17:52 +0100)]
Disable logging of missing languages

9 months agoSwitch saphira to squid 4
Tom Hughes [Sat, 19 Oct 2019 16:41:53 +0000 (17:41 +0100)]
Switch saphira to squid 4

9 months agoReduce squid memory limit on toothless
Tom Hughes [Sat, 19 Oct 2019 16:39:03 +0000 (17:39 +0100)]
Reduce squid memory limit on toothless

9 months agoUse one worker per CPU with squid 3 and 4
Tom Hughes [Fri, 18 Oct 2019 09:50:37 +0000 (10:50 +0100)]
Use one worker per CPU with squid 3 and 4

9 months agoIncrease nginx keepalive settings.
Matt Amos [Thu, 17 Oct 2019 11:47:09 +0000 (12:47 +0100)]
Increase nginx keepalive settings.

Increase both the number of requests per keepalive connection and
the number of keepalive connections to retain. This should reduce
the number of sockets used for a single connection and therefore
make it less likely that nginx will experience ephemeral socket
exhaustion at high request rates.

Closes #255

9 months agoAdd LWG email addresses for OTRS
Tom Hughes [Tue, 15 Oct 2019 12:58:44 +0000 (13:58 +0100)]
Add LWG email addresses for OTRS

9 months agonominatim: add python3-pyosimum dependency
Sarah Hoffmann [Mon, 14 Oct 2019 22:09:03 +0000 (00:09 +0200)]
nominatim: add python3-pyosimum dependency

9 months agoWorkaround jekyll-cache issue
Grant Slater [Sun, 13 Oct 2019 21:47:49 +0000 (22:47 +0100)]
Workaround jekyll-cache issue

9 months agoUpdate testing Dockerfile
Grant Slater [Sun, 13 Oct 2019 21:03:22 +0000 (22:03 +0100)]
Update testing Dockerfile

9 months agosotm: Use bundler managed jekyll version
Grant Slater [Sun, 13 Oct 2019 21:02:51 +0000 (22:02 +0100)]
sotm: Use bundler managed jekyll version

9 months agoLimit persistent connections to five minutes for squid 4
Tom Hughes [Sun, 13 Oct 2019 10:48:33 +0000 (11:48 +0100)]
Limit persistent connections to five minutes for squid 4

9 months agoFix persistent connection timeout for squid 3 and 4
Tom Hughes [Sun, 13 Oct 2019 10:47:56 +0000 (11:47 +0100)]
Fix persistent connection timeout for squid 3 and 4

10 months agoMake more fail2ban jail properties optional
Tom Hughes [Sat, 12 Oct 2019 14:49:19 +0000 (15:49 +0100)]
Make more fail2ban jail properties optional

10 months agoFix fail2ban servie
Tom Hughes [Sat, 12 Oct 2019 14:31:20 +0000 (15:31 +0100)]
Fix fail2ban servie

10 months agoEnable fail2ban for tile caches
Tom Hughes [Sat, 12 Oct 2019 10:54:44 +0000 (11:54 +0100)]
Enable fail2ban for tile caches

10 months agoDisable IPv6 for all squid instances
Tom Hughes [Sat, 12 Oct 2019 10:46:15 +0000 (11:46 +0100)]
Disable IPv6 for all squid instances

10 months agoSwitch toothless to squid 4
Tom Hughes [Thu, 10 Oct 2019 17:14:41 +0000 (18:14 +0100)]
Switch toothless to squid 4

10 months agoFix new cookstyle warnings
Tom Hughes [Mon, 7 Oct 2019 19:41:32 +0000 (20:41 +0100)]
Fix new cookstyle warnings

10 months agoUpdate bundle
Tom Hughes [Mon, 7 Oct 2019 19:40:20 +0000 (20:40 +0100)]
Update bundle

10 months agotilecache: remove peers from azure + stormfly-02
Grant Slater [Mon, 7 Oct 2019 18:29:05 +0000 (19:29 +0100)]
tilecache: remove peers from azure + stormfly-02

10 months agoUse bundle install deployment
Grant Slater [Sat, 5 Oct 2019 12:56:59 +0000 (13:56 +0100)]
Use bundle install deployment

10 months agoFix linting
Grant Slater [Tue, 1 Oct 2019 12:48:58 +0000 (13:48 +0100)]
Fix linting

10 months agoUpdate bundler
Grant Slater [Tue, 1 Oct 2019 12:41:20 +0000 (13:41 +0100)]
Update bundler

10 months agoAdd bundler gem
Grant Slater [Tue, 1 Oct 2019 12:09:18 +0000 (13:09 +0100)]
Add bundler gem

10 months agoAdd SoTM 2020
Grant Slater [Tue, 1 Oct 2019 11:28:53 +0000 (12:28 +0100)]
Add SoTM 2020

10 months agoUpdate carto stylesheet to v4.23.0
Tom Hughes [Sat, 21 Sep 2019 00:17:12 +0000 (01:17 +0100)]
Update carto stylesheet to v4.23.0

Closes #254

11 months agoAdd an extra resolve for nidhogg
Tom Hughes [Tue, 10 Sep 2019 20:22:54 +0000 (21:22 +0100)]
Add an extra resolve for nidhogg

11 months agoRemove some rubocop customisations that match cookstyle defaults
Tom Hughes [Mon, 9 Sep 2019 21:26:34 +0000 (22:26 +0100)]
Remove some rubocop customisations that match cookstyle defaults

11 months agoRemove no longer requried foodcritic customisations
Tom Hughes [Mon, 9 Sep 2019 21:08:23 +0000 (22:08 +0100)]
Remove no longer requried foodcritic customisations

11 months agoAvoid including Chef::Mixin::ShellOut in resources
Tom Hughes [Mon, 9 Sep 2019 19:00:53 +0000 (20:00 +0100)]
Avoid including Chef::Mixin::ShellOut in resources

11 months agoUpdate formatting of header comments
Tom Hughes [Mon, 9 Sep 2019 18:16:37 +0000 (19:16 +0100)]
Update formatting of header comments

11 months agoDrop long_description from metadata files
Tom Hughes [Mon, 9 Sep 2019 18:14:05 +0000 (19:14 +0100)]
Drop long_description from metadata files

11 months agoReplace foodcritic and rubocop with cookstyle
Tom Hughes [Mon, 9 Sep 2019 17:57:49 +0000 (18:57 +0100)]
Replace foodcritic and rubocop with cookstyle

11 months agoEnable peering for squid 4 caches
Tom Hughes [Mon, 9 Sep 2019 08:14:10 +0000 (09:14 +0100)]
Enable peering for squid 4 caches

11 months agoMerge remote-tracking branch 'github/pull/252'
Tom Hughes [Sat, 7 Sep 2019 15:28:13 +0000 (16:28 +0100)]
Merge remote-tracking branch 'github/pull/252'

11 months agoenable gadgets-edit rights to sysops
Yuri Astrakhan [Sat, 7 Sep 2019 15:18:39 +0000 (10:18 -0500)]
enable gadgets-edit rights to sysops

another issues with the new way gadgets are being used - need an extra right for sysops explicitly declared.

11 months agoMerge remote-tracking branch 'github/pull/251'
Tom Hughes [Fri, 6 Sep 2019 21:34:27 +0000 (22:34 +0100)]
Merge remote-tracking branch 'github/pull/251'

11 months agoapply changes to all sites, not just the private
Yuri Astrakhan [Fri, 6 Sep 2019 20:38:14 +0000 (15:38 -0500)]
apply changes to all sites, not just the private

made a mistake in the previous commit - the settings should apply to all sites instead.

11 months agoMerge remote-tracking branch 'github/pull/249'
Tom Hughes [Fri, 6 Sep 2019 18:18:29 +0000 (19:18 +0100)]
Merge remote-tracking branch 'github/pull/249'

11 months agoUpdate LocalSettings.php.erb
Yuri Astrakhan [Fri, 6 Sep 2019 17:54:13 +0000 (12:54 -0500)]
Update LocalSettings.php.erb

11 months agoafter MW upgrade sysops unable to edit MW UI
Yuri Astrakhan [Fri, 6 Sep 2019 16:10:42 +0000 (11:10 -0500)]
after MW upgrade sysops unable to edit MW UI

the new version moved UI-editing rights out of sysop and its own group because large wikis may have too big of a non-techy admin community (thousands). It would be pointless for a small wiki like ours.

11 months agoLock revision on org.civicrm.donotsendreportemail, which we do not control
Guillaume RISCHARD [Tue, 3 Sep 2019 20:46:20 +0000 (22:46 +0200)]
Lock revision on org.civicrm.donotsendreportemail, which we do not control

11 months agoIncrease apache server limit on piwik server
Tom Hughes [Tue, 3 Sep 2019 19:25:14 +0000 (20:25 +0100)]
Increase apache server limit on piwik server

11 months agopinning master, will run tests in another branch
Guillaume RISCHARD [Tue, 3 Sep 2019 18:03:42 +0000 (20:03 +0200)]
pinning master, will run tests in another branch

11 months agoPin osm username check to revision
Guillaume RISCHARD [Tue, 3 Sep 2019 17:24:07 +0000 (19:24 +0200)]
Pin osm username check to revision

11 months agoDrop publisher URL
Tom Hughes [Mon, 2 Sep 2019 07:53:27 +0000 (08:53 +0100)]
Drop publisher URL

11 months agoDisable HTTP2 for svn.openstreetmap.org
Tom Hughes [Sat, 31 Aug 2019 15:10:17 +0000 (16:10 +0100)]
Disable HTTP2 for svn.openstreetmap.org

11 months agoRemove world boundaries data source from tile servers
Tom Hughes [Sat, 31 Aug 2019 06:36:03 +0000 (07:36 +0100)]
Remove world boundaries data source from tile servers

11 months agoInstall water polygons on tile servers
Tom Hughes [Fri, 30 Aug 2019 18:41:00 +0000 (19:41 +0100)]
Install water polygons on tile servers

11 months agoUpdate carto stylesheet to v4.22.0
Tom Hughes [Fri, 30 Aug 2019 18:19:45 +0000 (19:19 +0100)]
Update carto stylesheet to v4.22.0

Closes #247

11 months agoDisable IPv6 support in squid on machines with no IPv6
Tom Hughes [Wed, 28 Aug 2019 18:18:33 +0000 (19:18 +0100)]
Disable IPv6 support in squid on machines with no IPv6

11 months agoUse composer to install libraries for mediawiki
Tom Hughes [Wed, 28 Aug 2019 17:36:23 +0000 (18:36 +0100)]
Use composer to install libraries for mediawiki

11 months agoAdd swap timeout to fume's squid cache stores
Tom Hughes [Wed, 28 Aug 2019 11:58:42 +0000 (12:58 +0100)]
Add swap timeout to fume's squid cache stores

11 months agoUpdate wiki to mediawiki 1.33
Tom Hughes [Tue, 27 Aug 2019 17:28:25 +0000 (18:28 +0100)]
Update wiki to mediawiki 1.33

11 months agoAdd osuadmin ssh public key
Grant Slater [Mon, 26 Aug 2019 22:27:50 +0000 (23:27 +0100)]
Add osuadmin ssh public key

11 months agomediawiki: run refreshLinks.php weekly
Grant Slater [Mon, 26 Aug 2019 21:27:40 +0000 (22:27 +0100)]
mediawiki: run refreshLinks.php weekly

11 months agoPass /ways and /relations calls to cgimap on dev
Tom Hughes [Fri, 23 Aug 2019 10:39:11 +0000 (11:39 +0100)]
Pass /ways and /relations calls to cgimap on dev

11 months agonginx: enable TLS 1.3
Grant Slater [Thu, 22 Aug 2019 21:22:29 +0000 (22:22 +0100)]
nginx: enable TLS 1.3

11 months agoFix rubocop warnings
Tom Hughes [Thu, 22 Aug 2019 20:22:01 +0000 (21:22 +0100)]
Fix rubocop warnings

11 months agoUpdate bundle
Tom Hughes [Thu, 22 Aug 2019 20:21:17 +0000 (21:21 +0100)]
Update bundle

11 months agoBump nokogiri to remove github security warning
Grant Slater [Thu, 22 Aug 2019 20:12:31 +0000 (21:12 +0100)]
Bump nokogiri to remove github security warning

11 months agonginx: Add ssl_stapling validation
Grant Slater [Thu, 22 Aug 2019 19:31:18 +0000 (20:31 +0100)]
nginx: Add ssl_stapling validation

11 months agoAllow overwrite when updating forum style
Tom Hughes [Thu, 22 Aug 2019 11:51:05 +0000 (12:51 +0100)]
Allow overwrite when updating forum style

11 months agoMerge remote-tracking branch 'github/pull/246'
Tom Hughes [Wed, 21 Aug 2019 16:06:02 +0000 (17:06 +0100)]
Merge remote-tracking branch 'github/pull/246'

11 months agoUpgrade foundation DWG and MWG wikis to 1.31
Tom Hughes [Wed, 21 Aug 2019 14:11:28 +0000 (15:11 +0100)]
Upgrade foundation DWG and MWG wikis to 1.31

11 months agoAdded new Air3 version
Stefan [Wed, 21 Aug 2019 13:54:22 +0000 (15:54 +0200)]
Added new Air3 version

11 months agotile: update index policy url
Grant Slater [Fri, 16 Aug 2019 21:22:24 +0000 (22:22 +0100)]
tile: update index policy url

11 months agobase: sysctl kernel.sched_autogroup_enabled=0
Grant Slater [Fri, 16 Aug 2019 20:24:32 +0000 (21:24 +0100)]
base: sysctl kernel.sched_autogroup_enabled=0

11 months agotilecache: full port range
Grant Slater [Fri, 16 Aug 2019 20:23:35 +0000 (21:23 +0100)]
tilecache: full port range

11 months agotilecache: minimal swapout
Grant Slater [Fri, 16 Aug 2019 20:22:57 +0000 (21:22 +0100)]
tilecache: minimal swapout

11 months agotilecache: increase somaxconn
Grant Slater [Fri, 16 Aug 2019 20:22:03 +0000 (21:22 +0100)]
tilecache: increase somaxconn

11 months agoReduce cache memory limit on azure
Tom Hughes [Thu, 15 Aug 2019 17:52:02 +0000 (18:52 +0100)]
Reduce cache memory limit on azure

11 months agoUse new style loading for cldr extension
Tom Hughes [Thu, 15 Aug 2019 10:01:20 +0000 (11:01 +0100)]
Use new style loading for cldr extension

11 months agoUse new style loading for skins
Tom Hughes [Thu, 15 Aug 2019 09:57:01 +0000 (10:57 +0100)]
Use new style loading for skins

11 months agoUpdate board wiki to 1.33
Tom Hughes [Thu, 15 Aug 2019 09:43:51 +0000 (10:43 +0100)]
Update board wiki to 1.33

11 months agoosqa: set safe WSGIDaemonProcess restart intervals
Grant Slater [Tue, 13 Aug 2019 23:00:38 +0000 (00:00 +0100)]
osqa: set safe WSGIDaemonProcess restart intervals

12 months agoRemove yevaud OOB from DHCP config
Tom Hughes [Sun, 11 Aug 2019 23:07:25 +0000 (00:07 +0100)]
Remove yevaud OOB from DHCP config

12 months agoRemove role for yevaud
Tom Hughes [Sun, 11 Aug 2019 19:30:18 +0000 (20:30 +0100)]
Remove role for yevaud

12 months agoFix interface name for ysera
Tom Hughes [Sun, 11 Aug 2019 19:29:57 +0000 (20:29 +0100)]
Fix interface name for ysera