Improve filesystem sandboxing for tile services

[chef.git] / roles / grisu.rb

diff --git a/roles/grisu.rb b/roles/grisu.rb
index 613f9f27ca9230761a1304391fc8e545ebcc7c0a..c82f3e51134920db11c4a87ac2bbed619379df04 100644 (file)
--- a/roles/grisu.rb
+++ b/roles/grisu.rb
@@ -2,6 +2,9 @@ name "grisu"
 description "Master role applied to grisu"
 
 default_attributes(
+  :bind => {
+    :clients => "bytemark"
+  },
   :networking => {
     :interfaces => {
       :internal_ipv4 => {
@@ -10,7 +13,7 @@ default_attributes(
         :family => :inet,
         :address => "10.0.32.20",
         :bond => {
-          :slaves => %w(em1 em2)
+          :slaves => %w[enp2s0f0 enp2s0f1]
         }
       },
       :external_ipv4 => {
@@ -27,32 +30,6 @@ default_attributes(
       }
     }
   },
-  :openvpn => {
-    :address => "10.0.16.5",
-    :tunnels => {
-      :ic2bm => {
-        :port => "1194",
-        :mode => "server",
-        :peer => {
-          :host => "ironbelly.openstreetmap.org"
-        }
-      },
-      :aws2bm => {
-        :port => "1195",
-        :mode => "server",
-        :peer => {
-          :host => "fafnir.openstreetmap.org"
-        }
-      },
-      :ucl2bm => {
-        :port => "1196",
-        :mode => "server",
-        :peer => {
-          :host => "ridley.openstreetmap.org"
-        }
-      }
-    }
-  },
   :planet => {
     :replication => "disabled"
   }
@@ -62,7 +39,7 @@ run_list(
   "role[bytemark]",
   "role[hp-dl180-g6]",
   "role[gateway]",
-  "role[web-storage]",
-  "role[planet]",
-  "recipe[openvpn]"
+  "role[backup]",
+  "role[planet]"
+  # "role[planetdump]"
 )