restrict postgres on nominatim to internal ip

[chef.git] / roles / poldi.rb

diff --git a/roles/poldi.rb b/roles/poldi.rb
index 869d4b8befbf74f77db2b83ca20ccabb78ce3c66..fc71d1fa746cd9b61cb541fc9e1451c29f46e91c 100644 (file)
--- a/roles/poldi.rb
+++ b/roles/poldi.rb
@@ -29,7 +29,7 @@ default_attributes(
     :md_tune => {
       :comment => "Tune the md sync performance so as not to kill system performance",
       :parameters => {
-        "block/md0/md/sync_speed_min" => "100",
+        "block/md0/md/sync_speed_min" => "1",
         "block/md0/md/sync_speed_max" => "100000"
       }
     }
@@ -40,30 +40,59 @@ default_attributes(
         :interface => "eth0",
         :role => :internal,
         :family => :inet,
-        :address => "10.0.0.16"
+        :address => "146.179.159.164"
       },
       :external_ipv4 => {
         :interface => "eth1",
         :role => :external,
         :family => :inet,
-        :address => "128.40.168.106"
+        :address => "193.63.75.101"
+      },
+      :external_ipv6 => {
+        :interface => "eth1",
+        :role => :external,
+        :family => :inet6,
+        :address => "2001:630:12:500:2e0:81ff:fec5:333e"
       }
     }
   },
   :postgresql => {
     :settings => {
       :defaults => {
-        :shared_buffers => "24GB",
+        :shared_buffers => "10GB",
         :work_mem => "160MB",
         :maintenance_work_mem => "10GB",
         :random_page_cost => "1.5",
-        :effective_cache_size => "48GB"
+        :effective_cache_size => "48GB",
+        :fsync => "on"
+      }
+    }
+  },
+  :nominatim => {
+    :enabled => true,
+    :flatnode_file => "/ssd-old/nominatim/nodes.store",
+    :database => {
+      :cluster => "9.3/main",
+      :dbname => "nominatim",
+      :postgis => "2.1"
+    },
+    :fpm_pools => {
+      :www => {
+        :port => "8000",
+        :pm => "dynamic",
+        :max_children => "60"
+      },
+      :bulk => {
+        :port => "8001",
+        :pm => "static",
+        :max_children => "10"
       }
     }
   }
 )
 
 run_list(
-  "role[ucl-internal]",
-  "role[nominatim]"
+  "role[ic]",
+  "role[tyan-s7010]",
+  "role[nominatim-slave]"
 )