chef: remove old verisign cert cleanup

[chef.git] / roles / wiki.rb

diff --git a/roles/wiki.rb b/roles/wiki.rb
index b1e16207e00084d5f9b33f451bd15be13bd4488b..c4783f78c2e8453c6f7bea88790382afa5c6324b 100644 (file)
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -7,22 +7,63 @@ default_attributes(
       :wiki => { :status => :role }
     }
   },
+  :apache => {
+    :mpm => "event",
+    :timeout => 30,
+    :event => {
+      :server_limit => 32,
+      :max_request_workers => 800,
+      :threads_per_child => 50,
+      :max_connections_per_child => 10000
+    }
+  },
+  :elasticsearch => {
+    :version => "7.x",
+    :cluster => {
+      :name => "wiki"
+    }
+  },
   :exim => {
-    :trusted_users => [ "www-data" ],
+    :trusted_users => %w[www-data wiki],
     :aliases => {
       :root => "grant"
-    }
+    },
+    :rewrites => [
+      {
+        :pattern => "www-data@openstreetmap.org",
+        :replacement => "wiki@noreply.openstreetmap.org",
+        :flags => "F"
+      }
+    ]
   },
   :memcached => {
-    :tcp_port => 11000,
-    :udp_port => 11000,
-    :memory_limit => 512,
+    :memory_limit => 4096,
     :connection_limit => 8192,
-    :chunk_growth_factor => 1.05,
-    :min_item_size => 5
+    :chunk_growth_factor => 1.25,
+    :min_item_size => 48
+  },
+  :sysctl => {
+    :swappiness => {
+      :comment => "Reduce swap usage",
+      :parameters => {
+        "vm.swappiness" => 10
+      }
+    }
+  },
+  :mysql => {
+    :settings => {
+      :mysqld => {
+        :innodb_buffer_pool_size => "4G",
+        :key_buffer_size => "64M",
+        :max_connections => "200",
+        :sort_buffer_size => "8M",
+        :tmp_table_size => "128M"
+      }
+    }
   }
 )
 
 run_list(
-  "recipe[mediawiki]"
+  "role[elasticsearch]",
+  "recipe[wiki]"
 )