Use ironbelly for DNS in Amsterdam with fallback to Cloudflare

[chef.git] / roles / equinix.rb

diff --git a/roles/equinix.rb b/roles/equinix.rb
index 8b711a2961a206276e70b4d84b186f4a12c92a05..29892328a5f838581809dce0f12626ae2da21bdc 100644 (file)
--- a/roles/equinix.rb
+++ b/roles/equinix.rb
@@ -3,13 +3,14 @@ description "Role applied to all servers at Equinix"
 
 default_attributes(
   :networking => {
-    :netplan => true,
-    :nameservers => ["66.28.0.45", "66.28.0.61", "2001:978:1:1::d", "2001:978:1:2::d"],
     :roles => {
       :internal => {
         :inet => {
           :prefix => "20",
-          :gateway => "10.0.48.10"
+          :gateway => "10.0.48.10",
+          :routes => {
+            "10.0.0.0/8" => { :via => "10.0.48.10" }
+          }
         }
       },
       :external => {
@@ -20,7 +21,12 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
-          :gateway => "2001:978:2:2C::172:1"
+          :gateway => "2001:978:2:2C::172:1",
+          :routes => {
+            "2001:978:2:2c::/64" => { :type => "unreachable" },
+            "2001:4860::/32" => { :type => "unreachable" },
+            "2a00:1450:4000::/37" => { :type => "unreachable" }
+          }
         }
       }
     }
@@ -28,12 +34,14 @@ default_attributes(
   :web => {
     :backends => %w[rails1 rails2 rails3],
     :fileserver => "ironbelly",
-    :readonly_database_host => "karm.ams.openstreetmap.org"
+    :readonly_database_host => "snap-01.ams.openstreetmap.org",
+    :primary_cluster => true
   }
 )
 
 override_attributes(
   :networking => {
+    :nameservers => ["10.0.48.10", "1.1.1.1", "1.0.0.1"],
     :search => ["ams.openstreetmap.org", "openstreetmap.org"]
   },
   :ntp => {