]> git.openstreetmap.org Git - chef.git/log
chef.git
7 years agoDrop use of legacy tile and osmfoundation certificates
Tom Hughes [Thu, 16 Feb 2017 21:13:22 +0000 (21:13 +0000)]
Drop use of legacy tile and osmfoundation certificates

7 years agoRemove support for the legacy tile certificate
Tom Hughes [Thu, 16 Feb 2017 21:03:07 +0000 (21:03 +0000)]
Remove support for the legacy tile certificate

7 years agoTeach tile servers to handle ACME challenges
Tom Hughes [Thu, 16 Feb 2017 19:02:37 +0000 (19:02 +0000)]
Teach tile servers to handle ACME challenges

7 years agoSwitch tile.osm.org to letsencrypt
Tom Hughes [Thu, 16 Feb 2017 18:53:38 +0000 (18:53 +0000)]
Switch tile.osm.org to letsencrypt

7 years agoSwitch nominatim.osm.org to letsencrypt
Tom Hughes [Wed, 15 Feb 2017 22:31:34 +0000 (22:31 +0000)]
Switch nominatim.osm.org to letsencrypt

7 years agodonate: disable mysql strict mode
Grant Slater [Wed, 15 Feb 2017 16:11:43 +0000 (16:11 +0000)]
donate: disable mysql strict mode

7 years agodonate: do not throw error on mysqli warning
Grant Slater [Wed, 15 Feb 2017 15:43:51 +0000 (15:43 +0000)]
donate: do not throw error on mysqli warning

7 years agodonate: use mysqli
Grant Slater [Wed, 15 Feb 2017 15:14:21 +0000 (15:14 +0000)]
donate: use mysqli

7 years agoimagery: enable http2
Grant Slater [Tue, 14 Feb 2017 22:33:21 +0000 (22:33 +0000)]
imagery: enable http2

7 years agoimagery: fix floating text and switch to https links in attribution
Grant Slater [Tue, 14 Feb 2017 22:23:00 +0000 (22:23 +0000)]
imagery: fix floating text and switch to https links in attribution

7 years agoimagery: fix nginx listen
Grant Slater [Tue, 14 Feb 2017 22:16:20 +0000 (22:16 +0000)]
imagery: fix nginx listen

7 years agotilecache: enable 443 on ipv4 too
Grant Slater [Tue, 14 Feb 2017 22:04:53 +0000 (22:04 +0000)]
tilecache: enable 443 on ipv4 too

7 years agoAdd layer switcher as soon as it is created
Tom Hughes [Tue, 14 Feb 2017 20:49:09 +0000 (20:49 +0000)]
Add layer switcher as soon as it is created

Without this we get an error if we add a layer that is in the
layer switcher to the map before the switcher is added.

7 years agoUse protocol relative URLs for imagery tiles
Tom Hughes [Tue, 14 Feb 2017 19:19:57 +0000 (19:19 +0000)]
Use protocol relative URLs for imagery tiles

7 years agoConfigure resolvers for stapling with nginx
Tom Hughes [Tue, 14 Feb 2017 19:15:35 +0000 (19:15 +0000)]
Configure resolvers for stapling with nginx

7 years agoLoad javascript resources over https
Tom Hughes [Tue, 14 Feb 2017 19:11:36 +0000 (19:11 +0000)]
Load javascript resources over https

7 years agoEnable SSL for imagery sites
Tom Hughes [Tue, 14 Feb 2017 18:37:22 +0000 (18:37 +0000)]
Enable SSL for imagery sites

7 years agoUpdate OTRS to 3.3.16
Tom Hughes [Tue, 14 Feb 2017 13:36:09 +0000 (13:36 +0000)]
Update OTRS to 3.3.16

7 years agoSWitch OTRS to use postgres 9.5
Tom Hughes [Tue, 14 Feb 2017 13:22:29 +0000 (13:22 +0000)]
SWitch OTRS to use postgres 9.5

7 years agoUpdate mediawiki cookbook for Ubuntu 16.04
Tom Hughes [Tue, 14 Feb 2017 12:33:55 +0000 (12:33 +0000)]
Update mediawiki cookbook for Ubuntu 16.04

7 years agoUpdate wordpress cookbook for Ubuntu 16.04
Tom Hughes [Tue, 14 Feb 2017 12:33:42 +0000 (12:33 +0000)]
Update wordpress cookbook for Ubuntu 16.04

7 years agoEnable SSL for dev apis
Tom Hughes [Mon, 13 Feb 2017 19:24:42 +0000 (19:24 +0000)]
Enable SSL for dev apis

7 years agoSwitch taginfo.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 19:11:23 +0000 (19:11 +0000)]
Switch taginfo.osm.org to letsencrypt

7 years agoFix access to stats.osm.org index
Tom Hughes [Mon, 13 Feb 2017 15:52:09 +0000 (15:52 +0000)]
Fix access to stats.osm.org index

7 years agoEnable SSL for stats.osm.org
Tom Hughes [Mon, 13 Feb 2017 15:43:14 +0000 (15:43 +0000)]
Enable SSL for stats.osm.org

7 years agoSwitch planet.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 15:41:20 +0000 (15:41 +0000)]
Switch planet.osm.org to letsencrypt

7 years agoSwitch logstash.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 15:38:53 +0000 (15:38 +0000)]
Switch logstash.osm.org to letsencrypt

7 years agoSwitch hardware.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 15:36:45 +0000 (15:36 +0000)]
Switch hardware.osm.org to letsencrypt

7 years agoSwitch chef.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 15:35:05 +0000 (15:35 +0000)]
Switch chef.osm.org to letsencrypt

7 years agoConfigure mysql for the "barracuda" file format for civicrm
Tom Hughes [Mon, 13 Feb 2017 14:16:09 +0000 (14:16 +0000)]
Configure mysql for the "barracuda" file format for civicrm

7 years agoUpdate civicrm to 4.7.16
Tom Hughes [Mon, 13 Feb 2017 13:49:50 +0000 (13:49 +0000)]
Update civicrm to 4.7.16

7 years agoExplicitly load letsencrypt intermediate on 14.04 machines
Tom Hughes [Sun, 12 Feb 2017 14:52:40 +0000 (14:52 +0000)]
Explicitly load letsencrypt intermediate on 14.04 machines

7 years agoDrop all use of SSLCertificateChainFile in apache configs
Tom Hughes [Sun, 12 Feb 2017 14:41:42 +0000 (14:41 +0000)]
Drop all use of SSLCertificateChainFile in apache configs

7 years agoRevert to civicrm 4.6.26
Tom Hughes [Sun, 12 Feb 2017 12:06:46 +0000 (12:06 +0000)]
Revert to civicrm 4.6.26

7 years agoUpdate civicrm and extensions to latest versions
Tom Hughes [Sun, 12 Feb 2017 11:14:40 +0000 (11:14 +0000)]
Update civicrm and extensions to latest versions

7 years agoSwitch forum.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 11:05:29 +0000 (11:05 +0000)]
Switch forum.osm.org to letsencrypt

7 years agoSwitch OTRS to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:52:09 +0000 (10:52 +0000)]
Switch OTRS to letsencrypt

7 years agoFix typo
Tom Hughes [Sun, 12 Feb 2017 10:44:11 +0000 (10:44 +0000)]
Fix typo

7 years agoSwitch lists.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:40:52 +0000 (10:40 +0000)]
Switch lists.osm.org to letsencrypt

7 years agoEnable SSL for irc.osm.org
Tom Hughes [Sun, 12 Feb 2017 10:39:45 +0000 (10:39 +0000)]
Enable SSL for irc.osm.org

7 years agoSwitch help.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:38:12 +0000 (10:38 +0000)]
Switch help.osm.org to letsencrypt

7 years agoSwitch git.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:36:08 +0000 (10:36 +0000)]
Switch git.osm.org to letsencrypt

7 years agoEnable SSL for dns.osm.org
Tom Hughes [Sun, 12 Feb 2017 10:34:32 +0000 (10:34 +0000)]
Enable SSL for dns.osm.org

7 years agoSwitch blogs to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:32:49 +0000 (10:32 +0000)]
Switch blogs to letsencrypt

7 years agoSwitch svn to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:31:16 +0000 (10:31 +0000)]
Switch svn to letsencrypt

7 years agoSwitch trac to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:29:03 +0000 (10:29 +0000)]
Switch trac to letsencrypt

7 years agoSwitch gps-tile to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:20:55 +0000 (10:20 +0000)]
Switch gps-tile to letsencrypt

7 years agoSwitch mediawiki sites to letsencrypt certificates
Tom Hughes [Sun, 12 Feb 2017 10:10:08 +0000 (10:10 +0000)]
Switch mediawiki sites to letsencrypt certificates

7 years agoGenerate letsencrypt certificates for mediawiki sites
Tom Hughes [Sun, 12 Feb 2017 09:53:49 +0000 (09:53 +0000)]
Generate letsencrypt certificates for mediawiki sites

7 years agoAvoid generating a certificate when we don't need one
Tom Hughes [Sun, 12 Feb 2017 09:45:54 +0000 (09:45 +0000)]
Avoid generating a certificate when we don't need one

7 years agoSwitch donate.osm.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 20:33:34 +0000 (20:33 +0000)]
Switch donate.osm.org to letsencrypt

7 years agoSwitch stateofthemap.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 20:27:37 +0000 (20:27 +0000)]
Switch stateofthemap.org to letsencrypt

7 years agoSwitch wordpress sites to letsencrypt certificates
Tom Hughes [Sat, 11 Feb 2017 19:51:44 +0000 (19:51 +0000)]
Switch wordpress sites to letsencrypt certificates

7 years agoDrop unused 2016.stateofthemap.org site
Tom Hughes [Sat, 11 Feb 2017 19:44:35 +0000 (19:44 +0000)]
Drop unused 2016.stateofthemap.org site

7 years agoForce unlinking of certificates
Tom Hughes [Sat, 11 Feb 2017 19:42:08 +0000 (19:42 +0000)]
Force unlinking of certificates

7 years agoIssue letsencrypt certificates for wordpress sites
Tom Hughes [Sat, 11 Feb 2017 19:32:35 +0000 (19:32 +0000)]
Issue letsencrypt certificates for wordpress sites

7 years agoAllow a certificate file to replace a symbolic link
Tom Hughes [Sat, 11 Feb 2017 19:19:37 +0000 (19:19 +0000)]
Allow a certificate file to replace a symbolic link

7 years agoSwitch operations.osmfoundation.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:50:10 +0000 (17:50 +0000)]
Switch operations.osmfoundation.org to letsencrypt

7 years agoSwitch piwik to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:28:26 +0000 (17:28 +0000)]
Switch piwik to letsencrypt

7 years agoEnable SSL for munin using letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:18:43 +0000 (17:18 +0000)]
Enable SSL for munin using letsencrypt

7 years agoAdd framework for managing letsencrypt certificates
Tom Hughes [Sat, 11 Feb 2017 15:03:01 +0000 (15:03 +0000)]
Add framework for managing letsencrypt certificates

7 years agoUpdate blogs to use planet.ini
Tom Hughes [Wed, 8 Feb 2017 19:04:11 +0000 (19:04 +0000)]
Update blogs to use planet.ini

7 years agoDrop groups.apis.dev.openstreetmap.org
Tom Hughes [Tue, 7 Feb 2017 07:04:55 +0000 (07:04 +0000)]
Drop groups.apis.dev.openstreetmap.org

7 years agoAdd Symbol to whitelist of classes to load for YAML.safe_load
Tom Hughes [Mon, 6 Feb 2017 08:35:49 +0000 (08:35 +0000)]
Add Symbol to whitelist of classes to load for YAML.safe_load

7 years agoAdd Time to whitelist of classes to load for YAML.safe_load
Matt Amos [Sun, 5 Feb 2017 19:11:56 +0000 (19:11 +0000)]
Add Time to whitelist of classes to load for YAML.safe_load

The update to ruby 2.3.1 pulls in a different version of the YAML / Psych code which doesn't allow the Time class to be loaded in `safe_load`, unlike the previous version. This change whitelists Time, and appears to solve the problem. Since `state.yaml` files are not loaded from the internet, and rarely hand-edited, then this seems like an okay thing to whitelist.

7 years agoUpdate bundle
Tom Hughes [Sun, 5 Feb 2017 10:40:36 +0000 (10:40 +0000)]
Update bundle

7 years agoUpdate foodcritic
Tom Hughes [Sun, 5 Feb 2017 10:28:54 +0000 (10:28 +0000)]
Update foodcritic

7 years agoUpdate rubocop
Tom Hughes [Sun, 5 Feb 2017 10:22:04 +0000 (10:22 +0000)]
Update rubocop

7 years agoSpecify database for osm2pgsql on rendering servers
Paul Norman [Sat, 4 Feb 2017 22:40:57 +0000 (14:40 -0800)]
Specify database for osm2pgsql on rendering servers

7 years agoReplace run_command and output_of_command with shell_out!
Tom Hughes [Tue, 31 Jan 2017 11:08:15 +0000 (11:08 +0000)]
Replace run_command and output_of_command with shell_out!

7 years agoAdd tests for otrs cookbook
Tom Hughes [Sat, 4 Feb 2017 17:06:31 +0000 (17:06 +0000)]
Add tests for otrs cookbook

7 years agoConfigure database for OTRS before trying to use it
Tom Hughes [Sat, 4 Feb 2017 15:48:40 +0000 (15:48 +0000)]
Configure database for OTRS before trying to use it

7 years agoSwitch OTRS to use postgres 9.3
Tom Hughes [Sat, 4 Feb 2017 11:27:50 +0000 (11:27 +0000)]
Switch OTRS to use postgres 9.3

7 years agoInherit manage_home attribute for accounts properly
Tom Hughes [Sat, 4 Feb 2017 11:10:48 +0000 (11:10 +0000)]
Inherit manage_home attribute for accounts properly

Because it's a boolean we can't just chain or operators as an
explict false will trigger fallback, so use Hash#fetch with default
values to do the fallback instead.

7 years agoUpdate CiviCRM to 4.6.26
Tom Hughes [Sat, 4 Feb 2017 00:13:15 +0000 (00:13 +0000)]
Update CiviCRM to 4.6.26

7 years agoUpdate carto stylesheet to v3.1.0
Tom Hughes [Sun, 29 Jan 2017 17:34:58 +0000 (17:34 +0000)]
Update carto stylesheet to v3.1.0

Closes #111

7 years agoEnsure nginc listens on both IPv6 and IPv4
Tom Hughes [Sun, 29 Jan 2017 11:50:02 +0000 (11:50 +0000)]
Ensure nginc listens on both IPv6 and IPv4

7 years agoMake imagery servers listen on IPv6
Tom Hughes [Sat, 28 Jan 2017 12:52:35 +0000 (12:52 +0000)]
Make imagery servers listen on IPv6

7 years agoFix blogs cron job
Tom Hughes [Fri, 27 Jan 2017 15:36:02 +0000 (15:36 +0000)]
Fix blogs cron job

7 years agoEnable brightbox-ruby-ng on ridley
Tom Hughes [Thu, 26 Jan 2017 19:17:22 +0000 (19:17 +0000)]
Enable brightbox-ruby-ng on ridley

7 years agoDeploy blogs.openstreetmap.org on shenron
Tom Hughes [Thu, 26 Jan 2017 19:10:29 +0000 (19:10 +0000)]
Deploy blogs.openstreetmap.org on shenron

7 years agoTune apache on shenron
Tom Hughes [Thu, 26 Jan 2017 18:31:07 +0000 (18:31 +0000)]
Tune apache on shenron

7 years agoMerge remote-tracking branch 'github/pull/102'
Tom Hughes [Thu, 26 Jan 2017 18:29:11 +0000 (18:29 +0000)]
Merge remote-tracking branch 'github/pull/102'

7 years agoMerge pull request #110 from zerebubuth/munin-dump-fixes
Matt Amos [Tue, 24 Jan 2017 13:18:05 +0000 (13:18 +0000)]
Merge pull request #110 from zerebubuth/munin-dump-fixes

Fixes to munin dump functionality

7 years agoMake the rrddump.sh script do all the work, including cleanup.
Matt Amos [Tue, 24 Jan 2017 13:06:50 +0000 (13:06 +0000)]
Make the rrddump.sh script do all the work, including cleanup.

7 years agoTouch XML files to reflect date of original RRD file. Don't run dump in parallel...
Matt Amos [Tue, 24 Jan 2017 12:45:07 +0000 (12:45 +0000)]
Touch XML files to reflect date of original RRD file. Don't run dump in parallel. Only keep latest 3 files, delete older ones.

7 years agoEnable directory indexes for munin/dumps
Tom Hughes [Tue, 24 Jan 2017 12:33:39 +0000 (12:33 +0000)]
Enable directory indexes for munin/dumps

7 years agoMerge pull request #109 from zerebubuth/munin-dump
Matt Amos [Tue, 24 Jan 2017 11:36:17 +0000 (11:36 +0000)]
Merge pull request #109 from zerebubuth/munin-dump

Downloadable munin data

7 years agoAdd simple script to dump munin data from RRD to XML and tar it up somewhere download...
Matt Amos [Mon, 23 Jan 2017 18:13:09 +0000 (18:13 +0000)]
Add simple script to dump munin data from RRD to XML and tar it up somewhere downloadable.

7 years agoSwitch viserion to use google DNS
Tom Hughes [Wed, 18 Jan 2017 19:20:47 +0000 (19:20 +0000)]
Switch viserion to use google DNS

7 years agoUpdate IP address for gorynych
Tom Hughes [Tue, 10 Jan 2017 13:42:04 +0000 (13:42 +0000)]
Update IP address for gorynych

7 years agoUpdate piwik to 3.0.1
Tom Hughes [Tue, 10 Jan 2017 00:09:55 +0000 (00:09 +0000)]
Update piwik to 3.0.1

7 years agoUpdate chef client to 12.17.44
Tom Hughes [Mon, 9 Jan 2017 08:23:30 +0000 (08:23 +0000)]
Update chef client to 12.17.44

7 years agoAdd resolved for kalessin
Tom Hughes [Sun, 8 Jan 2017 19:02:56 +0000 (19:02 +0000)]
Add resolved for kalessin

7 years agoFix interface name for kalessin
Tom Hughes [Sun, 8 Jan 2017 18:46:11 +0000 (18:46 +0000)]
Fix interface name for kalessin

7 years agoAdd role for kalessin
Tom Hughes [Sat, 7 Jan 2017 17:27:45 +0000 (17:27 +0000)]
Add role for kalessin

7 years agoEnable gpx-import on spike-01
Tom Hughes [Sat, 7 Jan 2017 14:22:50 +0000 (14:22 +0000)]
Enable gpx-import on spike-01

7 years agoDisable gpx-import on spike-04
Tom Hughes [Sat, 7 Jan 2017 11:07:00 +0000 (11:07 +0000)]
Disable gpx-import on spike-04

7 years agoRevert "Use bytemark memcached servers"
Tom Hughes [Sat, 7 Jan 2017 11:06:29 +0000 (11:06 +0000)]
Revert "Use bytemark memcached servers"

This reverts commit fb3ae238744efe974e3a7a206641139f677a8e3c.

7 years agoEnable replication on ironbelly
Tom Hughes [Sat, 7 Jan 2017 10:49:47 +0000 (10:49 +0000)]
Enable replication on ironbelly