Use https between tile caches and render servers

[chef.git] / roles / db-master.rb

diff --git a/roles/db-master.rb b/roles/db-master.rb
index 84dd05c551426f91eaa592d3da3e617edf3a2c21..e29b7131c31a443a1b292564262890fdac5e8ecc 100644 (file)
--- a/roles/db-master.rb
+++ b/roles/db-master.rb
@@ -3,23 +3,18 @@ description "Role applied to all the master database server"
 
 default_attributes(
   :postgresql => {
-    :versions => [ "9.1" ],
+    :versions => ["9.5"],
     :settings => {
       :defaults => {
         :wal_level => "hot_standby",
         :archive_mode => "on",
-        :archive_command => "/bin/cp %p /store/postgresql/system/archive/%f",
-        :max_wal_senders => "2",
-        :user_name_maps => {
-          :backup => [
-            { :system => "osmbackup", :postgres => "backup" }
-          ]
-        },
-        :early_authentication_rules => [
-          { :type => "local", :database => "all", :user => "backup", :method => "peer", :options => { :map => "backup" } }
-        ],
+        :archive_command => "/usr/local/bin/openstreetmap-wal-e --terse wal-push %p",
+        :max_wal_senders => "3",
         :late_authentication_rules => [
-          { :database => "replication", :user => "replication", :address => "146.179.159.168/32" }
+          { :database => "replication", :user => "replication", :address => "146.179.159.168/32" },
+          { :database => "replication", :user => "replication", :address => "146.179.159.170/32" },
+          { :database => "replication", :user => "replication", :address => "10.0.0.10/32" },
+          { :database => "replication", :user => "replication", :address => "10.0.32.40/32" }
         ]
       }
     }
@@ -28,7 +23,7 @@ default_attributes(
     :modules => {
       :archive => {
         :comment => "WAL Archive",
-        :path => "/store/postgresql/system/archive",
+        :path => "/store/arrays/nvme/postgresql-archive",
         :read_only => true,
         :write_only => false,
         :list => false,
@@ -36,7 +31,7 @@ default_attributes(
         :gid => "postgres",
         :transfer_logging => false,
         :hosts_allow => [
-          "146.179.159.168"
+          "146.179.159.168", "146.179.159.170, 10.0.0.10, 10.0.32.40"
         ]
       }
     }