Switch noquiklos to use an nftables firewall

[chef.git] / roles / noquiklos.rb

diff --git a/roles/noquiklos.rb b/roles/noquiklos.rb
index f42afa81b7b662a270af7af28323a335c3fbf751..e7078609fda16f38beb6300b6b43ca693c7ffc33 100644 (file)
--- a/roles/noquiklos.rb
+++ b/roles/noquiklos.rb
@@ -2,7 +2,13 @@ name "noquiklos"
 description "Master role applied to noquiklos"
 
 default_attributes(
 description "Master role applied to noquiklos"
 
 default_attributes(

+  :memcached => {
+    :memory_limit => 24 * 1024
+  },

   :networking => {
   :networking => {

+    :firewall => {
+      :engine => "nftables"
+    },

     :interfaces => {
       :internal_ipv4 => {
         :interface => "eth0.2801",
     :interfaces => {
       :internal_ipv4 => {
         :interface => "eth0.2801",


@@ -22,6 +28,5 @@ default_attributes(
 
 run_list(
   "role[ucl]",
 
 run_list(
   "role[ucl]",

-  "role[hp-dl360-g6]",
-  "role[gps-tile]"
+  "role[hp-dl360-g6]"

 )
 )