Tighten mod_evasive restrictions for the main site

[chef.git] / roles / snap-01.rb

diff --git a/roles/snap-01.rb b/roles/snap-01.rb
index 00b8d4b2a919eca21e0fd19bb88a569c66b7d9f4..d7fb452a5b52d14da2aa4576a1552f7129768180 100644 (file)
--- a/roles/snap-01.rb
+++ b/roles/snap-01.rb
@@ -4,19 +4,44 @@ description "Master role applied to snap-01"
 default_attributes(
   :networking => {
     :interfaces => {
 default_attributes(
   :networking => {
     :interfaces => {

-      :internal_ipv4 => {
+      :internal => {

         :interface => "bond0",
         :role => :internal,
         :interface => "bond0",
         :role => :internal,

-        :family => :inet,
-        :address => "10.0.48.49",
+        :inet => {
+          :address => "10.0.48.49"
+        },

         :bond => {
         :bond => {

+          :mode => "802.3ad",
+          :lacprate => "fast",
+          :xmithashpolicy => "layer3+4",

           :slaves => %w[eno1 eno2 eno3 eno4]
         }
       }
     }
           :slaves => %w[eno1 eno2 eno3 eno4]
         }
       }
     }

+  },
+  :postgresql => {
+    :settings => {
+      :defaults => {
+        :shared_buffers => "128GB",
+        :work_mem => "128MB",
+        :maintenance_work_mem => "2GB",
+        :effective_cache_size => "360GB"
+      }
+    }
+  },
+  :sysctl => {
+    :postgres => {
+      :comment => "Increase shared memory for postgres",
+      :parameters => {
+        "kernel.shmmax" => 132 * 1024 * 1024 * 1024,
+        "kernel.shmall" => 132 * 1024 * 1024 * 1024 / 4096
+      }
+    }

   }
 )
 
 run_list(
   }
 )
 
 run_list(

-  "role[equinix]"
+  "role[equinix-ams]",
+  "role[db-master]",
+  "role[db-backup]"

 )
 )