Allow domain level blocks on email senders

[chef.git] / roles / equinix-dub.rb

diff --git a/roles/equinix-dub.rb b/roles/equinix-dub.rb
index a2232420aaf7b1393bf9f71edd8d03221b60e09c..e24d71a1f1ece9599ff98c10a377e9c8a1cade91 100644 (file)
--- a/roles/equinix-dub.rb
+++ b/roles/equinix-dub.rb
@@ -2,6 +2,15 @@ name "equinix-dub"
 description "Role applied to all servers at Equinix Dublin"
 
 default_attributes(
 description "Role applied to all servers at Equinix Dublin"
 
 default_attributes(

+  :sysctl => {
+    :enable_bbr_10g => {
+      :comment => "Enable BBR. Equinix Dub has 10G uplink unlikely to buffer overrun",
+      :parameters => {
+        "net.ipv4.tcp_congestion_control" => "bbr",
+        "net.ipv4.tcp_notsent_lowat" => "16384"
+      }
+    }
+  },

   :networking => {
     :roles => {
       :internal => {
   :networking => {
     :roles => {
       :internal => {


@@ -21,23 +30,28 @@ default_attributes(
         },
         :inet6 => {
           :prefix => "64",
         },
         :inet6 => {
           :prefix => "64",

-          :gateway => "2001:470:1:b3b::1",
-          :routes => {
-            "2001:978:2:2c::/64" => { :type => "unreachable" }
-          }
+          :gateway => "2001:470:1:b3b::1"

         }
       }
     }
   },
         }
       }
     }
   },

+  :prometheus => {
+    :metrics => {
+      :host_location => {
+        :help => "Host location",
+        :labels => { :site => "dublin" }
+      }
+    }
+  },

   :web => {
     :fileserver => "fafnir",
   :web => {
     :fileserver => "fafnir",

-    :readonly_database_host => "snap-03.ucl.openstreetmap.org"
+    :readonly_database_host => "snap-03.dub.openstreetmap.org"

   }
 )
 
 override_attributes(
   :networking => {
   }
 )
 
 override_attributes(
   :networking => {

-    :nameservers => ["10.0.64.2", "1.1.1.1", "1.0.0.1"],
+    :nameservers => ["10.0.64.2", "8.8.8.8", "8.8.4.4"],

     :search => ["dub.openstreetmap.org", "openstreetmap.org"]
   },
   :ntp => {
     :search => ["dub.openstreetmap.org", "openstreetmap.org"]
   },
   :ntp => {