Exempt out web server from nominatim fail2ban jail

[chef.git] / roles / nominatim.rb

diff --git a/roles/nominatim.rb b/roles/nominatim.rb
index 8cfa7fe7a14da309f3b4ee8c82dfdefcece77c03..4a7d40e06fedc63e40d8f717ddd753a4821c6545 100644 (file)
--- a/roles/nominatim.rb
+++ b/roles/nominatim.rb
@@ -1,5 +1,5 @@
 name "nominatim"
-description "Role applied to all nominatim servers"
+description "Role applied to all nominatim servers."
 
 default_attributes(
   :accounts => {
@@ -18,10 +18,13 @@ default_attributes(
     :keepalive => false,
     :event => {
       :server_limit => 32,
-      :max_clients => 1600,
+      :max_request_workers => 1600,
       :threads_per_child => 50
     }
   },
+  :apt => {
+    :sources => ["postgresql"]
+  },
   :postgresql => {
     :settings => {
       :defaults => {
@@ -30,6 +33,7 @@ default_attributes(
         :checkpoint_segments => "32",
         :checkpoint_timeout => "10min",
         :checkpoint_completion_target => "0.9",
+        :shared_buffers => "2GB",
         :autovacuum_max_workers => "1"
       }
     }
@@ -67,24 +71,9 @@ default_attributes(
         "net.netfilter.nf_conntrack_max" => "131072"
       }
     }
-  },
-  :nominatim => {
-    :enabled => true,
-    :repository => "git://git.openstreetmap.org/nominatim.git",
-    :tablespaces => {
-      "Osm2pgsql_Data" => "data",
-      "Osm2pgsql_Index" => "data",
-      "Place_Data" => "data",
-      "Place_Index" => "ssd2",
-      "Address_Data" => "data",
-      "Address_Index" => "ssd2",
-      "Search_Data" => "ssd1",
-      "Search_Index" => "ssd1",
-      "Aux_Data" => "aux",
-      "Aux_Index" => "aux"
-    }
   }
 )
 
 run_list(
+  "recipe[nominatim::default]"
 )