apache: relax mod_evasive further

[chef.git] / roles / wiki.rb

diff --git a/roles/wiki.rb b/roles/wiki.rb
index e9f3cb8650a6fbb7e4e3a95fedd7269f2fc2acd9..1e19d9df136d67bfbdc01385e19d1674c6572c4a 100644 (file)
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -7,31 +7,63 @@ default_attributes(
       :wiki => { :status => :role }
     }
   },
+  :apache => {
+    :mpm => "event",
+    :timeout => 30,
+    :event => {
+      :server_limit => 32,
+      :max_request_workers => 800,
+      :threads_per_child => 50,
+      :max_connections_per_child => 10000
+    }
+  },
+  :elasticsearch => {
+    :version => "7.x",
+    :cluster => {
+      :name => "wiki"
+    }
+  },
   :exim => {
-    :trusted_users => [ "www-data" ],
+    :trusted_users => %w[www-data wiki],
     :aliases => {
       :root => "grant"
-    }
+    },
+    :rewrites => [
+      {
+        :pattern => "www-data@openstreetmap.org",
+        :replacement => "wiki@noreply.openstreetmap.org",
+        :flags => "F"
+      }
+    ]
   },
   :memcached => {
-    :memory_limit => 1024,
+    :memory_limit => 4096,
     :connection_limit => 8192,
-    :chunk_growth_factor => 1.05,
-    :min_item_size => 5
+    :chunk_growth_factor => 1.25,
+    :min_item_size => 48
   },
-  :apache => {
-    :mpm => "prefork",
-    :timeout => 30,
-    :event => {
-      :server_limit => 32,
-      :max_clients => 800,
-      :threads_per_child => 50,
-      :max_requests_per_child => 10000
+  :sysctl => {
+    :swappiness => {
+      :comment => "Reduce swap usage",
+      :parameters => {
+        "vm.swappiness" => 10
+      }
+    }
+  },
+  :mysql => {
+    :settings => {
+      :mysqld => {
+        :innodb_buffer_pool_size => "4G",
+        :key_buffer_size => "64M",
+        :max_connections => "500",
+        :sort_buffer_size => "8M",
+        :tmp_table_size => "128M"
+      }
     }
   }
 )
 
 run_list(
-  "recipe[elasticsearch]",
+  "role[elasticsearch]",
   "recipe[wiki]"
 )