Pass authentication headers to cgimap so that it can handle OAuth.

[chef.git] / roles / planet.rb

diff --git a/roles/planet.rb b/roles/planet.rb
index 88cc5c1b5e367b29d62a66a29bf1e118713e059f..d9f0112bbaacbd4b4aeea042aab62baa5b825240 100644 (file)
--- a/roles/planet.rb
+++ b/roles/planet.rb
@@ -6,8 +6,8 @@ default_attributes(
     :users => {
       :bretth => { :status => :user },
       :planet => {
-        :status => :role,
-        :members => [ :bretth ]
+        :status => :administrator,
+        :members => [:bretth]
       }
     }
   },
@@ -22,28 +22,36 @@ default_attributes(
         :uid => "nobody",
         :gid => "nogroup",
         :transfer_logging => false,
-        :exclude => [ ".*" ],
+        :exclude => [".*"],
         :max_connections => 10,
         :ignore_errors => true,
         :ignore_nonreadable => true,
         :timeout => 3600,
-        :refuse_options => [ "checksum" ]
+        :refuse_options => ["checksum"]
       }
     }
   },
+  :networking => {
+    :firewall => {
+      :http_connection_limit => 10
+    }
+  },
   :apache => {
     :mpm => "event",
-    :keepalive => false,
+    :keepalive => true,
     :event => {
       :server_limit => 20,
       :max_clients => 1000,
-      :threads_per_child => 50
+      :threads_per_child => 50,
+      :max_spare_threads => 525
     }
   }
 )
 
 run_list(
+  "role[web-db]",
   "recipe[planet]",
+  "recipe[planet::replication]",
   "recipe[nfs::server]",
   "recipe[rsyncd]"
 )