Enable firewall on gorwen

[chef.git] / roles / equinix.rb

diff --git a/roles/equinix.rb b/roles/equinix.rb
index 8b711a2961a206276e70b4d84b186f4a12c92a05..625aa8f57d3e78be50170375d6933d4c8854eb90 100644 (file)
--- a/roles/equinix.rb
+++ b/roles/equinix.rb
@@ -3,13 +3,15 @@ description "Role applied to all servers at Equinix"
 
 default_attributes(
   :networking => {
-    :netplan => true,
-    :nameservers => ["66.28.0.45", "66.28.0.61", "2001:978:1:1::d", "2001:978:1:2::d"],
+    :nameservers => ["66.28.0.45", "66.28.0.61"],
     :roles => {
       :internal => {
         :inet => {
           :prefix => "20",
-          :gateway => "10.0.48.10"
+          :gateway => "10.0.48.10",
+          :routes => {
+            "10.0.0.0/8" => { :via => "10.0.48.10" }
+          }
         }
       },
       :external => {
@@ -20,7 +22,12 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
-          :gateway => "2001:978:2:2C::172:1"
+          :gateway => "2001:978:2:2C::172:1",
+          :routes => {
+            "2001:978:2:2c::/64" => { :type => "unreachable" },
+            "2001:4860::/32" => { :type => "unreachable" },
+            "2a00:1450:4000::/37" => { :type => "unreachable" }
+          }
         }
       }
     }
@@ -28,7 +35,8 @@ default_attributes(
   :web => {
     :backends => %w[rails1 rails2 rails3],
     :fileserver => "ironbelly",
-    :readonly_database_host => "karm.ams.openstreetmap.org"
+    :readonly_database_host => "snap-01.ams.openstreetmap.org",
+    :primary_cluster => true
   }
 )