openssh: disable password authentication by default (except dev)

[chef.git] / roles / stormfly-04.rb

diff --git a/roles/stormfly-04.rb b/roles/stormfly-04.rb
index 941b67d893bbad1c39641835b415782bcf557586..b59bf690e9121c78f2cd251d267bf4ebfba4ff1c 100644 (file)
--- a/roles/stormfly-04.rb
+++ b/roles/stormfly-04.rb
@@ -2,25 +2,56 @@ name "stormfly-04"
 description "Master role applied to stormfly-04"
 
 default_attributes(
+  :hardware => {
+    :shm_size => "38g"
+  },
   :networking => {
     :interfaces => {
       :external_ipv4 => {
-        :interface => "eno1",
+        :interface => "bond0",
         :role => :external,
         :family => :inet,
-        :address => "140.211.167.100"
+        :address => "140.211.167.100",
+        :bond => {
+          :slaves => %w[eno1 eno2 eno3 eno4 eno49 eno50]
+        }
       },
       :external_ipv6 => {
-        :interface => "eno1",
+        :interface => "bond0",
         :role => :external,
         :family => :inet6,
         :address => "2605:bc80:3010:700::8cd3:a764"
       }
     }
+  },
+  :postgresql => {
+    :versions => ["14"],
+    :settings => {
+      :defaults => {
+        :work_mem => "300MB",
+        :fsync => "on",
+        :effective_io_concurrency => "100"
+      }
+    }
+  },
+  :nominatim => {
+    :state => "standalone",
+    :enable_qa_tiles => true,
+    :dbcluster => "14/main",
+    :postgis => "3",
+    :flatnode_file => "/ssd/nominatim/nodes.store",
+    :logdir => "/ssd/nominatim/log",
+    :fpm_pools => {
+      "nominatim.openstreetmap.org" => {
+        :max_children => 100
+      }
+    }
   }
 )
 
 run_list(
   "role[osuosl]",
-  "role[hp-g9]"
+  "role[hp-g9]",
+  "role[geodns]",
+  "role[nominatim]"
 )