chef.git
3 years agoSwitch chef.osm.org to letsencrypt
Tom Hughes [Mon, 13 Feb 2017 15:35:05 +0000 (15:35 +0000)]
Switch chef.osm.org to letsencrypt

3 years agoConfigure mysql for the "barracuda" file format for civicrm
Tom Hughes [Mon, 13 Feb 2017 14:16:09 +0000 (14:16 +0000)]
Configure mysql for the "barracuda" file format for civicrm

3 years agoUpdate civicrm to 4.7.16
Tom Hughes [Mon, 13 Feb 2017 13:49:50 +0000 (13:49 +0000)]
Update civicrm to 4.7.16

3 years agoExplicitly load letsencrypt intermediate on 14.04 machines
Tom Hughes [Sun, 12 Feb 2017 14:52:40 +0000 (14:52 +0000)]
Explicitly load letsencrypt intermediate on 14.04 machines

3 years agoDrop all use of SSLCertificateChainFile in apache configs
Tom Hughes [Sun, 12 Feb 2017 14:41:42 +0000 (14:41 +0000)]
Drop all use of SSLCertificateChainFile in apache configs

3 years agoRevert to civicrm 4.6.26
Tom Hughes [Sun, 12 Feb 2017 12:06:46 +0000 (12:06 +0000)]
Revert to civicrm 4.6.26

3 years agoUpdate civicrm and extensions to latest versions
Tom Hughes [Sun, 12 Feb 2017 11:14:40 +0000 (11:14 +0000)]
Update civicrm and extensions to latest versions

3 years agoSwitch forum.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 11:05:29 +0000 (11:05 +0000)]
Switch forum.osm.org to letsencrypt

3 years agoSwitch OTRS to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:52:09 +0000 (10:52 +0000)]
Switch OTRS to letsencrypt

3 years agoFix typo
Tom Hughes [Sun, 12 Feb 2017 10:44:11 +0000 (10:44 +0000)]
Fix typo

3 years agoSwitch lists.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:40:52 +0000 (10:40 +0000)]
Switch lists.osm.org to letsencrypt

3 years agoEnable SSL for irc.osm.org
Tom Hughes [Sun, 12 Feb 2017 10:39:45 +0000 (10:39 +0000)]
Enable SSL for irc.osm.org

3 years agoSwitch help.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:38:12 +0000 (10:38 +0000)]
Switch help.osm.org to letsencrypt

3 years agoSwitch git.osm.org to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:36:08 +0000 (10:36 +0000)]
Switch git.osm.org to letsencrypt

3 years agoEnable SSL for dns.osm.org
Tom Hughes [Sun, 12 Feb 2017 10:34:32 +0000 (10:34 +0000)]
Enable SSL for dns.osm.org

3 years agoSwitch blogs to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:32:49 +0000 (10:32 +0000)]
Switch blogs to letsencrypt

3 years agoSwitch svn to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:31:16 +0000 (10:31 +0000)]
Switch svn to letsencrypt

3 years agoSwitch trac to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:29:03 +0000 (10:29 +0000)]
Switch trac to letsencrypt

3 years agoSwitch gps-tile to letsencrypt
Tom Hughes [Sun, 12 Feb 2017 10:20:55 +0000 (10:20 +0000)]
Switch gps-tile to letsencrypt

3 years agoSwitch mediawiki sites to letsencrypt certificates
Tom Hughes [Sun, 12 Feb 2017 10:10:08 +0000 (10:10 +0000)]
Switch mediawiki sites to letsencrypt certificates

3 years agoGenerate letsencrypt certificates for mediawiki sites
Tom Hughes [Sun, 12 Feb 2017 09:53:49 +0000 (09:53 +0000)]
Generate letsencrypt certificates for mediawiki sites

3 years agoAvoid generating a certificate when we don't need one
Tom Hughes [Sun, 12 Feb 2017 09:45:54 +0000 (09:45 +0000)]
Avoid generating a certificate when we don't need one

3 years agoSwitch donate.osm.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 20:33:34 +0000 (20:33 +0000)]
Switch donate.osm.org to letsencrypt

3 years agoSwitch stateofthemap.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 20:27:37 +0000 (20:27 +0000)]
Switch stateofthemap.org to letsencrypt

3 years agoSwitch wordpress sites to letsencrypt certificates
Tom Hughes [Sat, 11 Feb 2017 19:51:44 +0000 (19:51 +0000)]
Switch wordpress sites to letsencrypt certificates

3 years agoDrop unused 2016.stateofthemap.org site
Tom Hughes [Sat, 11 Feb 2017 19:44:35 +0000 (19:44 +0000)]
Drop unused 2016.stateofthemap.org site

3 years agoForce unlinking of certificates
Tom Hughes [Sat, 11 Feb 2017 19:42:08 +0000 (19:42 +0000)]
Force unlinking of certificates

3 years agoIssue letsencrypt certificates for wordpress sites
Tom Hughes [Sat, 11 Feb 2017 19:32:35 +0000 (19:32 +0000)]
Issue letsencrypt certificates for wordpress sites

3 years agoAllow a certificate file to replace a symbolic link
Tom Hughes [Sat, 11 Feb 2017 19:19:37 +0000 (19:19 +0000)]
Allow a certificate file to replace a symbolic link

3 years agoSwitch operations.osmfoundation.org to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:50:10 +0000 (17:50 +0000)]
Switch operations.osmfoundation.org to letsencrypt

3 years agoSwitch piwik to letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:28:26 +0000 (17:28 +0000)]
Switch piwik to letsencrypt

3 years agoEnable SSL for munin using letsencrypt
Tom Hughes [Sat, 11 Feb 2017 17:18:43 +0000 (17:18 +0000)]
Enable SSL for munin using letsencrypt

3 years agoAdd framework for managing letsencrypt certificates
Tom Hughes [Sat, 11 Feb 2017 15:03:01 +0000 (15:03 +0000)]
Add framework for managing letsencrypt certificates

3 years agoUpdate blogs to use planet.ini
Tom Hughes [Wed, 8 Feb 2017 19:04:11 +0000 (19:04 +0000)]
Update blogs to use planet.ini

3 years agoDrop groups.apis.dev.openstreetmap.org
Tom Hughes [Tue, 7 Feb 2017 07:04:55 +0000 (07:04 +0000)]
Drop groups.apis.dev.openstreetmap.org

3 years agoAdd Symbol to whitelist of classes to load for YAML.safe_load
Tom Hughes [Mon, 6 Feb 2017 08:35:49 +0000 (08:35 +0000)]
Add Symbol to whitelist of classes to load for YAML.safe_load

3 years agoAdd Time to whitelist of classes to load for YAML.safe_load
Matt Amos [Sun, 5 Feb 2017 19:11:56 +0000 (19:11 +0000)]
Add Time to whitelist of classes to load for YAML.safe_load

The update to ruby 2.3.1 pulls in a different version of the YAML / Psych code which doesn't allow the Time class to be loaded in `safe_load`, unlike the previous version. This change whitelists Time, and appears to solve the problem. Since `state.yaml` files are not loaded from the internet, and rarely hand-edited, then this seems like an okay thing to whitelist.

3 years agoUpdate bundle
Tom Hughes [Sun, 5 Feb 2017 10:40:36 +0000 (10:40 +0000)]
Update bundle

3 years agoUpdate foodcritic
Tom Hughes [Sun, 5 Feb 2017 10:28:54 +0000 (10:28 +0000)]
Update foodcritic

3 years agoUpdate rubocop
Tom Hughes [Sun, 5 Feb 2017 10:22:04 +0000 (10:22 +0000)]
Update rubocop

3 years agoSpecify database for osm2pgsql on rendering servers
Paul Norman [Sat, 4 Feb 2017 22:40:57 +0000 (14:40 -0800)]
Specify database for osm2pgsql on rendering servers

3 years agoReplace run_command and output_of_command with shell_out!
Tom Hughes [Tue, 31 Jan 2017 11:08:15 +0000 (11:08 +0000)]
Replace run_command and output_of_command with shell_out!

3 years agoAdd tests for otrs cookbook
Tom Hughes [Sat, 4 Feb 2017 17:06:31 +0000 (17:06 +0000)]
Add tests for otrs cookbook

3 years agoConfigure database for OTRS before trying to use it
Tom Hughes [Sat, 4 Feb 2017 15:48:40 +0000 (15:48 +0000)]
Configure database for OTRS before trying to use it

3 years agoSwitch OTRS to use postgres 9.3
Tom Hughes [Sat, 4 Feb 2017 11:27:50 +0000 (11:27 +0000)]
Switch OTRS to use postgres 9.3

3 years agoInherit manage_home attribute for accounts properly
Tom Hughes [Sat, 4 Feb 2017 11:10:48 +0000 (11:10 +0000)]
Inherit manage_home attribute for accounts properly

Because it's a boolean we can't just chain or operators as an
explict false will trigger fallback, so use Hash#fetch with default
values to do the fallback instead.

3 years agoUpdate CiviCRM to 4.6.26
Tom Hughes [Sat, 4 Feb 2017 00:13:15 +0000 (00:13 +0000)]
Update CiviCRM to 4.6.26

3 years agoUpdate carto stylesheet to v3.1.0
Tom Hughes [Sun, 29 Jan 2017 17:34:58 +0000 (17:34 +0000)]
Update carto stylesheet to v3.1.0

Closes #111

3 years agoEnsure nginc listens on both IPv6 and IPv4
Tom Hughes [Sun, 29 Jan 2017 11:50:02 +0000 (11:50 +0000)]
Ensure nginc listens on both IPv6 and IPv4

3 years agoMake imagery servers listen on IPv6
Tom Hughes [Sat, 28 Jan 2017 12:52:35 +0000 (12:52 +0000)]
Make imagery servers listen on IPv6

3 years agoFix blogs cron job
Tom Hughes [Fri, 27 Jan 2017 15:36:02 +0000 (15:36 +0000)]
Fix blogs cron job

3 years agoEnable brightbox-ruby-ng on ridley
Tom Hughes [Thu, 26 Jan 2017 19:17:22 +0000 (19:17 +0000)]
Enable brightbox-ruby-ng on ridley

3 years agoDeploy blogs.openstreetmap.org on shenron
Tom Hughes [Thu, 26 Jan 2017 19:10:29 +0000 (19:10 +0000)]
Deploy blogs.openstreetmap.org on shenron

3 years agoTune apache on shenron
Tom Hughes [Thu, 26 Jan 2017 18:31:07 +0000 (18:31 +0000)]
Tune apache on shenron

3 years agoMerge remote-tracking branch 'github/pull/102'
Tom Hughes [Thu, 26 Jan 2017 18:29:11 +0000 (18:29 +0000)]
Merge remote-tracking branch 'github/pull/102'

3 years agoMerge pull request #110 from zerebubuth/munin-dump-fixes
Matt Amos [Tue, 24 Jan 2017 13:18:05 +0000 (13:18 +0000)]
Merge pull request #110 from zerebubuth/munin-dump-fixes

Fixes to munin dump functionality

3 years agoMake the rrddump.sh script do all the work, including cleanup.
Matt Amos [Tue, 24 Jan 2017 13:06:50 +0000 (13:06 +0000)]
Make the rrddump.sh script do all the work, including cleanup.

3 years agoTouch XML files to reflect date of original RRD file. Don't run dump in parallel...
Matt Amos [Tue, 24 Jan 2017 12:45:07 +0000 (12:45 +0000)]
Touch XML files to reflect date of original RRD file. Don't run dump in parallel. Only keep latest 3 files, delete older ones.

3 years agoEnable directory indexes for munin/dumps
Tom Hughes [Tue, 24 Jan 2017 12:33:39 +0000 (12:33 +0000)]
Enable directory indexes for munin/dumps

3 years agoMerge pull request #109 from zerebubuth/munin-dump
Matt Amos [Tue, 24 Jan 2017 11:36:17 +0000 (11:36 +0000)]
Merge pull request #109 from zerebubuth/munin-dump

Downloadable munin data

3 years agoAdd simple script to dump munin data from RRD to XML and tar it up somewhere download...
Matt Amos [Mon, 23 Jan 2017 18:13:09 +0000 (18:13 +0000)]
Add simple script to dump munin data from RRD to XML and tar it up somewhere downloadable.

3 years agoSwitch viserion to use google DNS
Tom Hughes [Wed, 18 Jan 2017 19:20:47 +0000 (19:20 +0000)]
Switch viserion to use google DNS

3 years agoUpdate IP address for gorynych
Tom Hughes [Tue, 10 Jan 2017 13:42:04 +0000 (13:42 +0000)]
Update IP address for gorynych

3 years agoUpdate piwik to 3.0.1
Tom Hughes [Tue, 10 Jan 2017 00:09:55 +0000 (00:09 +0000)]
Update piwik to 3.0.1

3 years agoUpdate chef client to 12.17.44
Tom Hughes [Mon, 9 Jan 2017 08:23:30 +0000 (08:23 +0000)]
Update chef client to 12.17.44

3 years agoAdd resolved for kalessin
Tom Hughes [Sun, 8 Jan 2017 19:02:56 +0000 (19:02 +0000)]
Add resolved for kalessin

3 years agoFix interface name for kalessin
Tom Hughes [Sun, 8 Jan 2017 18:46:11 +0000 (18:46 +0000)]
Fix interface name for kalessin

3 years agoAdd role for kalessin
Tom Hughes [Sat, 7 Jan 2017 17:27:45 +0000 (17:27 +0000)]
Add role for kalessin

3 years agoEnable gpx-import on spike-01
Tom Hughes [Sat, 7 Jan 2017 14:22:50 +0000 (14:22 +0000)]
Enable gpx-import on spike-01

3 years agoDisable gpx-import on spike-04
Tom Hughes [Sat, 7 Jan 2017 11:07:00 +0000 (11:07 +0000)]
Disable gpx-import on spike-04

3 years agoRevert "Use bytemark memcached servers"
Tom Hughes [Sat, 7 Jan 2017 11:06:29 +0000 (11:06 +0000)]
Revert "Use bytemark memcached servers"

This reverts commit fb3ae238744efe974e3a7a206641139f677a8e3c.

3 years agoEnable replication on ironbelly
Tom Hughes [Sat, 7 Jan 2017 10:49:47 +0000 (10:49 +0000)]
Enable replication on ironbelly

3 years agoDisable replication on grisu
Tom Hughes [Sat, 7 Jan 2017 10:42:40 +0000 (10:42 +0000)]
Disable replication on grisu

3 years agoUse bytemark memcached servers
Tom Hughes [Fri, 6 Jan 2017 21:47:51 +0000 (21:47 +0000)]
Use bytemark memcached servers

3 years agoEnable replication on grisu
Tom Hughes [Fri, 6 Jan 2017 21:34:48 +0000 (21:34 +0000)]
Enable replication on grisu

3 years agoDisable replication on ironbelly
Tom Hughes [Fri, 6 Jan 2017 21:23:26 +0000 (21:23 +0000)]
Disable replication on ironbelly

3 years agoEnable gpx-import on spike-04
Tom Hughes [Fri, 6 Jan 2017 19:01:48 +0000 (19:01 +0000)]
Enable gpx-import on spike-04

3 years agoDon't redirect 127.0.0.1 as doing so can break munin
Tom Hughes [Fri, 6 Jan 2017 18:30:59 +0000 (18:30 +0000)]
Don't redirect 127.0.0.1 as doing so can break munin

3 years agoDisable gpx-import on spike-01
Tom Hughes [Fri, 6 Jan 2017 17:29:58 +0000 (17:29 +0000)]
Disable gpx-import on spike-01

3 years agoAdd HTML/JS/CSS for gps.tile.openstreetmap.org site
Tom Hughes [Thu, 5 Jan 2017 00:22:15 +0000 (00:22 +0000)]
Add HTML/JS/CSS for gps.tile.openstreetmap.org site

3 years agoMake tile server export script require a valid TOTP token
Tom Hughes [Tue, 3 Jan 2017 10:31:36 +0000 (10:31 +0000)]
Make tile server export script require a valid TOTP token

3 years agotilecache: do not replace stale osm token
Grant Slater [Mon, 2 Jan 2017 23:14:04 +0000 (23:14 +0000)]
tilecache: do not replace stale osm token

3 years agotilecache: make config test quiet
Grant Slater [Mon, 2 Jan 2017 23:05:22 +0000 (23:05 +0000)]
tilecache: make config test quiet

3 years agotilecache: fix token windowing
Grant Slater [Mon, 2 Jan 2017 23:01:46 +0000 (23:01 +0000)]
tilecache: fix token windowing

3 years agotilecache: switch reload to systemctl try-reload-or-restart
Grant Slater [Mon, 2 Jan 2017 22:17:59 +0000 (22:17 +0000)]
tilecache: switch reload to systemctl try-reload-or-restart

3 years agotilecache: cleaner nginx reload
Grant Slater [Mon, 2 Jan 2017 22:12:02 +0000 (22:12 +0000)]
tilecache: cleaner nginx reload

3 years agotilecache: temporarily increase default rate
Grant Slater [Mon, 2 Jan 2017 22:11:37 +0000 (22:11 +0000)]
tilecache: temporarily increase default rate

3 years agonginx: add note on service start
Grant Slater [Mon, 2 Jan 2017 22:10:42 +0000 (22:10 +0000)]
nginx: add note on service start

3 years agonginx: do not immediately start nginx
Grant Slater [Mon, 2 Jan 2017 21:57:10 +0000 (21:57 +0000)]
nginx: do not immediately start nginx

3 years agotilecache: remove cookie flags secure + httponly
Grant Slater [Mon, 2 Jan 2017 21:34:23 +0000 (21:34 +0000)]
tilecache: remove cookie flags secure + httponly

3 years agotilecache: specify correct token key encoding
Grant Slater [Mon, 2 Jan 2017 21:31:33 +0000 (21:31 +0000)]
tilecache: specify correct token key encoding

3 years agotilecache: fix config race
Grant Slater [Mon, 2 Jan 2017 21:30:55 +0000 (21:30 +0000)]
tilecache: fix config race

3 years agotilecache: fix token variable name
Grant Slater [Mon, 2 Jan 2017 21:25:05 +0000 (21:25 +0000)]
tilecache: fix token variable name

3 years agotilecache: fix token variable
Grant Slater [Mon, 2 Jan 2017 21:17:46 +0000 (21:17 +0000)]
tilecache: fix token variable

3 years agotilecache: add osm.org stale token
Grant Slater [Mon, 2 Jan 2017 21:12:19 +0000 (21:12 +0000)]
tilecache: add osm.org stale token

3 years agotilecache: fix token in databag
Grant Slater [Mon, 2 Jan 2017 21:09:49 +0000 (21:09 +0000)]
tilecache: fix token in databag

3 years agotilecache: correct cookie domain
Grant Slater [Mon, 2 Jan 2017 20:54:54 +0000 (20:54 +0000)]
tilecache: correct cookie domain

3 years agotilecache: fix quoting format
Grant Slater [Mon, 2 Jan 2017 20:36:20 +0000 (20:36 +0000)]
tilecache: fix quoting format

3 years agotilecache: fix token typo
Grant Slater [Mon, 2 Jan 2017 20:33:45 +0000 (20:33 +0000)]
tilecache: fix token typo

3 years agotilecache: chef code for token support
Grant Slater [Mon, 2 Jan 2017 20:27:51 +0000 (20:27 +0000)]
tilecache: chef code for token support