imagery: only allow titiler access from localhost

[chef.git] / roles / snap-02.rb

diff --git a/roles/snap-02.rb b/roles/snap-02.rb
index 8d3a66f337c17c5b4accae5496e74aca42e1f957..80a2b3598723f6777948b886d961e2f20b708633 100644 (file)
--- a/roles/snap-02.rb
+++ b/roles/snap-02.rb
@@ -4,16 +4,37 @@ description "Master role applied to snap-02"
 default_attributes(
   :networking => {
     :interfaces => {
-      :internal_ipv4 => {
+      :internal => {
         :interface => "eno1.2801",
         :role => :internal,
-        :family => :inet,
-        :address => "10.0.0.4"
+        :inet => {
+          :address => "10.0.0.4"
+        }
+      }
+    }
+  },
+  :postgresql => {
+    :settings => {
+      :defaults => {
+        :shared_buffers => "128GB",
+        :work_mem => "128MB",
+        :maintenance_work_mem => "2GB",
+        :effective_cache_size => "360GB"
+      }
+    }
+  },
+  :sysctl => {
+    :postgres => {
+      :comment => "Increase shared memory for postgres",
+      :parameters => {
+        "kernel.shmmax" => 132 * 1024 * 1024 * 1024,
+        "kernel.shmall" => 132 * 1024 * 1024 * 1024 / 4096
       }
     }
   }
 )
 
 run_list(
-  "role[ucl]"
+  "role[ucl]",
+  "role[db-slave]"
 )