openssh: disable password authentication by default (except dev)

[chef.git] / roles / spike-02.rb

diff --git a/roles/spike-02.rb b/roles/spike-02.rb
index e0d03d2202aa5117e6ecb1567438d1038e7aa978..2c565f1e3d32d72d90ecad496c86a74377242b71 100644 (file)
--- a/roles/spike-02.rb
+++ b/roles/spike-02.rb
@@ -8,38 +8,32 @@ default_attributes(
         :interface => "bond0",
         :role => :internal,
         :family => :inet,
-        :address => "10.0.48.7",
+        :address => "10.0.64.4",
         :bond => {
-          :slaves => %w[eth0 eth1]
+          :mode => "802.3ad",
+          :lacprate => "fast",
+          :xmithashpolicy => "layer3+4",
+          :slaves => %w[eno1 eno2 eno3 eno4 eno49 eno50]
         }
       },
       :external_ipv4 => {
-        :interface => "bond0.3",
+        :interface => "bond0.101",
         :role => :external,
         :family => :inet,
-        :address => "130.117.76.7"
+        :address => "184.104.226.100"
       },
-      # :external_ipv6 => {
-      #   :interface => "bond0.3",
-      #   :role => :external,
-      #   :family => :inet6,
-      #   :address => "2001:978:2:2C::172:1007"
-      # }
-    }
-  },
-  :sysctl => {
-    :ipv6_autoconf => {
-      :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => {
-        "net.ipv6.conf.eth0.autoconf" => "0",
-        "net.ipv6.conf.eth0.accept_ra" => "0"
+      :external_ipv6 => {
+        :interface => "bond0.101",
+        :role => :external,
+        :family => :inet6,
+        :address => "2001:470:1:b3b::4"
       }
     }
   }
 )
 
 run_list(
-  "role[ic]",
-  "role[hp-dl360-g6]",
+  "role[equinix-dub]",
+  "role[hp-g9]",
   "role[web-frontend]"
 )