Improve filesystem sandboxing for tile services

[chef.git] / roles / norbert.rb

diff --git a/roles/norbert.rb b/roles/norbert.rb
index d86bd088c8b1bc741404b266a80dfe6ea57ea2a5..9fe581a977ca314c9ee3291e52da87e378aca854 100644 (file)
--- a/roles/norbert.rb
+++ b/roles/norbert.rb
@@ -4,45 +4,37 @@ description "Master role applied to norbert"
 default_attributes(
   :networking => {
     :interfaces => {
+      :internal_ipv4 => {
+        :interface => "bond0",
+        :role => :internal,
+        :family => :inet,
+        :address => "10.0.48.17",
+        :bond => {
+          :mode => "802.3ad",
+          :lacprate => "fast",
+          :xmithashpolicy => "layer3+4",
+          :slaves => %w[enp25s0f0 enp25s0f1]
+        }
+      },
       :external_ipv4 => {
-        :interface => "ens18",
+        :interface => "bond0.2",
         :role => :external,
         :family => :inet,
-        :address => "89.234.186.100",
-        :prefix => "27",
-        :gateway => "89.234.186.97"
+        :address => "130.117.76.17"
       },
       :external_ipv6 => {
-        :interface => "ens18",
+        :interface => "bond0.2",
         :role => :external,
         :family => :inet6,
-        :address => "2a00:5884:821c::1",
-        :prefix => "48",
-        :gateway => "fe80::204:92:100:1"
-      }
-    }
-  },
-  :squid => {
-    :cache_mem => "7500 MB",
-    :cache_dir => "coss /store/squid/coss-01 80000 block-size=8192 max-size=262144 membufs=80"
-  },
-  :nginx => {
-    :cache => {
-      :proxy => {
-        :max_size => "2048M"
+        :address => "2001:978:2:2C::172:11"
       }
+
     }
-  },
-  :tilecache => {
-    :tile_parent => "france.render.openstreetmap.org",
-    :tile_siblings => [
-      "noomoahk.openstreetmap.org",
-      "ladon.openstreetmap.org"
-    ]
   }
 )
 
 run_list(
-  "role[grifon]",
-  "role[tilecache]"
+  "role[equinix-ams]",
+  "role[geodns]",
+  "role[planet]"
 )