Improve filesystem sandboxing for tile services

[chef.git] / roles / kessie.rb

diff --git a/roles/kessie.rb b/roles/kessie.rb
index 640ebfb86ed6ff9a0d6c31abf9d7c9921e32a64d..5a3ff94b51c027c9429431c6c1486108982a5497 100644 (file)
--- a/roles/kessie.rb
+++ b/roles/kessie.rb
@@ -2,14 +2,39 @@ name "kessie"
 description "Master role applied to kessie"
 
 default_attributes(
+  :sysctl => {
+    :swappiness => {
+      :comment => "Only swap in an emergency",
+      :parameters => {
+        "vm.swappiness" => "1"
+      }
+    }
+  },
+  :munin => {
+    :plugins => {
+      :sensors_temp => {
+        :temp6 => { :warning => "71.0", :critical => "76.0" },
+        :temp7 => { :warning => "71.0", :critical => "76.0" },
+        :temp8 => { :warning => "71.0", :critical => "76.0" },
+        :temp9 => { :warning => "71.0", :critical => "76.0" }
+      }
+    }
+  },
   :networking => {
     :interfaces => {
       :external_ipv4 => {
-        :interface => "em1",
+        :interface => "enp2s0f0",
         :role => :external,
         :family => :inet,
         :address => "178.250.74.36",
         :hwaddress => "d8:d3:85:5d:87:5e"
+      },
+      :external_ipv6 => {
+        :interface => "enp2s0f0",
+        :role => :external,
+        :family => :inet6,
+        :address => "2a02:1658:4:0:dad3:85ff:fe5d:875e",
+        :hwaddress => "d8:d3:85:5d:87:5e"
       }
     }
   }