Disable TLSv1.3 for upstream connections from squid on Ubuntu 20.04

[chef.git] / roles / equinix.rb

diff --git a/roles/equinix.rb b/roles/equinix.rb
index 9318fb2d055eabf2509a62bbff476528532ef0ff..85b11110619aff348748cf412b549935eef28f92 100644 (file)
--- a/roles/equinix.rb
+++ b/roles/equinix.rb
@@ -3,8 +3,7 @@ description "Role applied to all servers at Equinix"
 
 default_attributes(
   :networking => {
 
 default_attributes(
   :networking => {

-    :nameservers => ["8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844"],
-    :dnssec => "no",
+    :nameservers => ["66.28.0.45", "66.28.0.61"],

     :roles => {
       :internal => {
         :inet => {
     :roles => {
       :internal => {
         :inet => {


@@ -20,7 +19,12 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
         },
         :inet6 => {
           :prefix => "64",

-          :gateway => "2001:978:2:2C::172:1"
+          :gateway => "2001:978:2:2C::172:1",
+          :routes => {
+            "2001:978:2:2c::/64" => { :type => "unreachable" },
+            "2001:4860::/32" => { :type => "unreachable" },
+            "2a00:1450:4000::/37" => { :type => "unreachable" }
+          }

         }
       }
     }
         }
       }
     }