Update cron job to use cerbot instead of letsencrypt

[chef.git] / roles / karm.rb

diff --git a/roles/karm.rb b/roles/karm.rb
index 6d2f15e790f16e666ddf280fb89b7e9914266baf..8f091af2fc26058c13449ccb8ace0c3a6c251a7a 100644 (file)
--- a/roles/karm.rb
+++ b/roles/karm.rb
@@ -2,6 +2,12 @@ name "karm"
 description "Master role applied to karm"
 
 default_attributes(
 description "Master role applied to karm"
 
 default_attributes(

+  :apt => {
+    :sources => ["postgresql"]
+  },
+  :db => {
+    :cluster => "9.5/main"
+  },

   :networking => {
     :interfaces => {
       :internal_ipv4 => {
   :networking => {
     :interfaces => {
       :internal_ipv4 => {


@@ -13,6 +19,27 @@ default_attributes(
       }
     }
   },
       }
     }
   },

+  :postgresql => {
+    :settings => {
+      :defaults => {
+        :shared_buffers => "64GB",
+        :work_mem => "64MB",
+        :maintenance_work_mem => "1GB",
+        :effective_cache_size => "180GB",
+        :effective_io_concurrency => "256",
+        :random_page_cost => "1.1"
+      }
+    }
+  },
+  :sysctl => {
+    :postgres => {
+      :comment => "Increase shared memory for postgres",
+      :parameters => {
+        "kernel.shmmax" => 66 * 1024 * 1024 * 1024,
+        "kernel.shmall" => 66 * 1024 * 1024 * 1024 / 4096
+      }
+    }
+  },

   :sysfs => {
     :md_tune => {
       :comment => "Enable request merging for NVMe devices",
   :sysfs => {
     :md_tune => {
       :comment => "Enable request merging for NVMe devices",


@@ -22,12 +49,16 @@ default_attributes(
         "block/nvme2n1/queue/nomerges" => "1",
         "block/nvme3n1/queue/nomerges" => "1",
         "block/nvme4n1/queue/nomerges" => "1",
         "block/nvme2n1/queue/nomerges" => "1",
         "block/nvme3n1/queue/nomerges" => "1",
         "block/nvme4n1/queue/nomerges" => "1",

-        "block/nvme5n1/queue/nomerges" => "1"
+        "block/nvme5n1/queue/nomerges" => "1",
+        "block/nvme6n1/queue/nomerges" => "1",
+        "block/nvme7n1/queue/nomerges" => "1"

       }
     }
   }
 )
 
 run_list(
       }
     }
   }
 )
 
 run_list(

-  "role[ic]"
+  "role[ic]",
+  "role[db-master]",
+  "role[db-backup]"

 )
 )