Tighten mod_evasive restrictions for the main site

[chef.git] / roles / crm.rb

diff --git a/roles/crm.rb b/roles/crm.rb
index 5dfa89aaafa2e1d4c6ba49169dcf0b2a2d4964a6..372c05c57c7eee7e7cfec59af495935afd5bd544 100644 (file)
--- a/roles/crm.rb
+++ b/roles/crm.rb
@@ -4,11 +4,12 @@ description "Role applied to CRM server"
 default_attributes(
   :accounts => {
     :users => {
 default_attributes(
   :accounts => {
     :users => {

-      :stereo => { :status => :administrator }
+      :stereo => { :status => :administrator },
+      :jon => { :status => :user }

     }
   },
   :exim => {
     }
   },
   :exim => {

-    :local_domains => ["join.osmfoundation.org"],
+    :local_domains => ["join.osmfoundation.org", "supporting.openstreetmap.org"],

     :routes => {
       :join_return => {
         :comment => "return@join.osmfoundation.org",
     :routes => {
       :join_return => {
         :comment => "return@join.osmfoundation.org",


@@ -25,9 +26,32 @@ default_attributes(
         :maildir => "/var/mail/crm-mail",
         :user => "www-data",
         :group => "mail"
         :maildir => "/var/mail/crm-mail",
         :user => "www-data",
         :group => "mail"

+      },
+      :supporting_return => {
+        :comment => "return@supporting.openstreetmap.org",
+        :domains => ["supporting.osmfoundation.org"],
+        :local_parts => ["return"],
+        :maildir => "/var/mail/crm-return",
+        :user => "www-data",
+        :group => "mail"
+      },
+      :supporting_mail => {
+        :comment => "mail@supporting.openstreetmap.org",
+        :domains => ["supporting.openstreetmap.org"],
+        :local_parts => ["mail"],
+        :maildir => "/var/mail/crm-mail",
+        :user => "www-data",
+        :group => "mail"

       }
     },
     :trusted_users => ["www-data"]
       }
     },
     :trusted_users => ["www-data"]

+  },
+  :mysql => {
+    :settings => {
+      :mysqld => {
+        :log_bin_trust_function_creators => 1
+      }
+    }

   }
 )
 
   }
 )