Allow external data script to grant render permission

Update carto stylesheet to v5.3.1

Merge remote-tracking branch 'github/pull/406'

Update links on dev server homepage

Update some links on our little dev server homepage.
* The rails port install instructions are now in github.
* It's no longer serving up SVN branches (These days it's all github. That branches list is maintained here in chef https://github.com/openstreetmap/chef/blob/master/roles/dev.rb#L100 but I think that would be a bit of tangled thing to link to from this homepage)

Update network configuration for rename of thorn-01 to lockheed

Rename thorn-01 to lockheed and give it a public IP address

Merge remote-tracking branch 'github/pull/405'

Bump cookstyle from 7.10.0 to 7.10.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.10.0 to 7.10.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.10.0...v7.10.1)

Signed-off-by: dependabot[bot] <support@github.com>

imagery: update leaflet + add locate control

Remove roles for cmok, naga and norbert

Update Intel Mass Storage tool

Update chef client to 16.13.16

Merge remote-tracking branch 'github/pull/404'

Bump actions/cache from v2.1.4 to v2.1.5

Bumps [actions/cache](https://github.com/actions/cache) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8)

Signed-off-by: dependabot[bot] <support@github.com>

Add an oauth2 test instance

Upgrade promscale to use Postgres 13

Update promscale to 0.3.0

nominatim: disable Postgresql jit

Upgrade OTRS to postgres 13

Upgrade dev server to postgres 13

Revert "Add blackhold route for gravater IPv6 block in amsterdam"

This reverts commit c9488aaf1d9b0df30544691e3845eb781ffab805.

stateofthemap: Use multiple threads for bundle

otrs: Use znuny mirror of otrs 6.0.30 release as upstream is gone

DNS: update dnscontrol to 3.8.0

nominatim: add new dependency python3-icu

nominatim: add automatic migration on updates

Increase replication slots

Enable replication to snap-02

Configure snap-02 as a database slave

Fix new cookstyle warnings

Merge remote-tracking branch 'github/pull/403'

Merge remote-tracking branch 'github/pull/402'

Bump cookstyle from 7.9.0 to 7.10.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.9.0 to 7.10.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.9.0...v7.10.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump test-kitchen from 2.11.1 to 2.11.2

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.11.1 to 2.11.2.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v2.11.1...v2.11.2)

Signed-off-by: dependabot[bot] <support@github.com>

Update promscale to 0.2.1

Add blackhold route for gravater IPv6 block in amsterdam

nominatim: do not forward status.php without param to UI

Merge remote-tracking branch 'github/pull/399'

Bump cookstyle from 7.8.3 to 7.9.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.8.3 to 7.9.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.8.3...v7.9.0)

Signed-off-by: dependabot[bot] <support@github.com>

Add alert for IPMI power sensors

Label SNMP statistics with the site name

Add prometheus SNMP monitoring of switch and PDUs in Amsterdam

Update Intel Mass Storage tool

Allow promscale to manage the postgres extensions

nominatim: add new python pkg dependencies

Merge remote-tracking branch 'github/pull/398'

Bump test-kitchen from 2.11.0 to 2.11.1

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.11.0 to 2.11.1.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v2.11.0...v2.11.1)

Signed-off-by: dependabot[bot] <support@github.com>

Reduce maximum multixact age for promscale

Add monitoring for unfrozen IDs in postgres databases

Merge remote-tracking branch 'github/pull/397'

Merge remote-tracking branch 'github/pull/396'

add certificate for nominatim.qgis.org

Bump kitchen-dokken from 2.12.0 to 2.12.1

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.12.0...v2.12.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump test-kitchen from 2.10.0 to 2.11.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v2.10.0...v2.11.0)

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.2.1

Add some additional prometheus alerts

Switch forum to use a custom FPM pool with prometheus monitoring

nominatim: be a bit more lenient before banning

Use elasticsearch 6.x repsitory for filebeat

nominatim: location of config file for nominatim-ui has changed

Revert org.civicoop.emailapi to a version that actually exists

Switch wikis to use elasticsearch 6.x

civicrm + extensions version bump

Only use tagged minor versions of mediawiki

Do all mail deliveries via a controlled set of queues

spamassassin: increase max children and increase max spare to decrease churn

Add comments to minutely state files

Merge remote-tracking branch 'github/pull/395'

Bump kitchen-dokken from 2.11.2 to 2.12.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.11.2 to 2.12.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.11.2...v2.12.0)

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.2.0

Deploy 2021 State of the Map site

Remove cleanup code

Switch back to online mode

Switch minutely replication to use osmdbt

Switch to api_readonly mode

Lock osmdbt postgres plugin to v0.2

Remove tilecache role from saphira and toothless

Collect metrics from promscale

Tighten memory limits for imagery servers

Merge remote-tracking branch 'github/pull/393'

Bump cookstyle from 7.8.0 to 7.8.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.8.0 to 7.8.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.8.0...v7.8.3)

Signed-off-by: dependabot[bot] <support@github.com>

Move rhaegal back to the main replication feed

Add additional alerting rules

Merge remote-tracking branch 'github/pull/392'

Bump cookstyle from 7.7.2 to 7.8.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.7.2 to 7.8.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.7.2...v7.8.0)

Signed-off-by: dependabot[bot] <support@github.com>

Increase postgres connection limit on errol

Remove role for waima

Log autovacuums for promscale

Add some more prometheus alerts

Remove old cleanup code

Tighten memory limits for imagery servers

nominatim: do not compile immediately after checkout

The country grid needs to be downloaded first.

nominatim: download country grid before building

nominatim: also download us postcode data

Also put external data into build directory as per new project
layouts.

nominatim: switch to nominatim-ui fork on git.osm.org

Add domain labels to SSL exporter metrics

Move promscale tuning to role and tune WAL sizes

Put postgres stats directory on a tmpfs

Merge remote-tracking branch 'github/pull/391'

Bump actions/setup-ruby from v1.1.2 to v1.1.3

Bumps [actions/setup-ruby](https://github.com/actions/setup-ruby) from v1.1.2 to v1.1.3.
- [Release notes](https://github.com/actions/setup-ruby/releases)
- [Commits](https://github.com/actions/setup-ruby/compare/v1.1.2...e932e7af67fc4a8fc77bd86b744acd4e42fe3543)

Signed-off-by: dependabot[bot] <support@github.com>