default_attributes(
:accounts => {
:users => {
- :osmbackup => { :status => :role },
:gravitystorm => { :status => :user }
}
},
}
}
},
- :openvpn => {
- :address => "10.0.16.2",
- :tunnels => {
- :ic2ucl => {
- :port => "1194",
- :mode => "server",
- :peer => {
- :host => "ridley.openstreetmap.org"
- }
- }
- }
- },
:rsyncd => {
:modules => {
:hosts => {
"127.0.0.0/8", # localhost
"::1" # localhost
]
- },
- :backup => {
- :comment => "Backups",
- :path => "/store/backup",
- :read_only => false,
- :write_only => true,
- :list => false,
- :uid => "osmbackup",
- :gid => "osmbackup",
- :transfer_logging => false,
- :hosts_allow => [
- "128.40.168.0/24", # ucl external
- "146.179.159.160/27", # ic internal
- "193.63.75.96/27", # ic external
- "2001:630:12:500::/64", # ic external
- "127.0.0.0/8", # localhost
- "::1" # localhost
- ]
}
}
}
);
run_list(
- "role[ic]",
- "role[gateway]",
- "role[chef-server]",
- "role[chef-repository]",
- "role[planet]",
- "role[stats]",
- "role[web-storage]",
- "recipe[rsyncd]",
- "recipe[openvpn]"
+ "role[ic]"
)