:apt => {
:sources => ["ubuntugis-unstable"]
},
+ :bind => {
+ :clients => "equinix"
+ },
+ :dhcpd => {
+ :first_address => "10.0.63.1",
+ :last_address => "10.0.63.254"
+ },
:elasticsearch => {
:cluster => {
:routing => {
:disk => {
:watermark => {
:low => "95%",
- :high => "98%"
+ :high => "98%",
+ :flood_stage => "99%"
}
}
}
:data => "/store/elasticsearch"
}
},
- :git => {
- :allowed_nodes => "*:*",
- :user => "chefrepo",
- :group => "chefrepo",
- :backup => "chef-git"
- },
:networking => {
:interfaces => {
:internal_ipv4 => {
- :interface => "eth0",
+ :interface => "bond0",
:role => :internal,
:family => :inet,
- :address => "146.179.159.177"
+ :address => "10.0.48.10",
+ :bond => {
+ :slaves => %w[eth0 eth1]
+ }
},
:external_ipv4 => {
- :interface => "eth1",
+ :interface => "bond0.2",
:role => :external,
:family => :inet,
- :address => "193.63.75.107"
+ :address => "130.117.76.10"
},
:external_ipv6 => {
- :interface => "eth1",
+ :interface => "bond0.2",
:role => :external,
:family => :inet6,
- :address => "2001:630:12:500:225:90ff:fec4:f6ef"
+ :address => "2001:978:2:2C::172:A"
}
}
},
- :openvpn => {
- :address => "10.0.16.2",
- :tunnels => {
- :ic2ucl => {
- :port => "1194",
- :mode => "server",
- :peer => {
- :host => "ridley.openstreetmap.org"
- }
- },
- :aws2ic => {
- :port => "1195",
- :mode => "server",
- :peer => {
- :host => "fafnir.openstreetmap.org"
- }
- }
- }
+ :planet => {
+ :replication => "enabled"
},
:rsyncd => {
:modules => {
:gid => "www-data",
:transfer_logging => false,
:hosts_allow => [
- "128.40.168.0/24", # ucl external (wates)
- "128.40.45.192/27", # ucl external (wolfson)
- "146.179.159.160/27", # ic internal
- "193.63.75.96/27", # ic external
- "2001:630:12:500::/64", # ic external
- "127.0.0.0/8", # localhost
- "::1" # localhost
+ "193.60.236.0/24", # ucl external
+ "10.0.48.0/20", # equinix internal
+ "130.117.76.0/27", # equinix external
+ "2001:978:2:2C::172:0/112", # equinix external
+ "10.0.32.0/20", # bytemark internal
+ "89.16.162.16/28", # bytemark external
+ "2001:41c9:2:d6::/64", # bytemark external
+ "127.0.0.0/8", # localhost
+ "::1" # localhost
],
:nodes_allow => "roles:tilecache"
}
)
run_list(
- "role[ic]",
+ "role[equinix]",
"role[gateway]",
- "role[chef-server]",
- "role[chef-repository]",
"role[web-storage]",
"role[supybot]",
"role[backup]",
- "role[stats]",
"role[planet]",
"role[planetdump]",
- "role[logstash]",
"recipe[rsyncd]",
- "recipe[openvpn]",
- "recipe[git::server]",
- "recipe[tilelog]",
- "recipe[serverinfo]"
+ "recipe[dhcpd]",
+ "recipe[tilelog]"
)