Improve filesystem sandboxing for tile services

[chef.git] / roles / snap-01.rb

diff --git a/roles/snap-01.rb b/roles/snap-01.rb
index 00b8d4b2a919eca21e0fd19bb88a569c66b7d9f4..db9b16e7420a6b6c258fe1b9c9d9bb3fc6330dee 100644 (file)
--- a/roles/snap-01.rb
+++ b/roles/snap-01.rb
@@ -10,13 +10,39 @@ default_attributes(
         :family => :inet,
         :address => "10.0.48.49",
         :bond => {
+          :mode => "802.3ad",
+          :lacprate => "fast",
+          :xmithashpolicy => "layer3+4",
           :slaves => %w[eno1 eno2 eno3 eno4]
         }
       }
     }
+  },
+  :postgresql => {
+    :settings => {
+      :defaults => {
+        :shared_buffers => "128GB",
+        :work_mem => "128MB",
+        :maintenance_work_mem => "2GB",
+        :effective_cache_size => "360GB",
+        :effective_io_concurrency => "256",
+        :random_page_cost => "1.1"
+      }
+    }
+  },
+  :sysctl => {
+    :postgres => {
+      :comment => "Increase shared memory for postgres",
+      :parameters => {
+        "kernel.shmmax" => 132 * 1024 * 1024 * 1024,
+        "kernel.shmall" => 132 * 1024 * 1024 * 1024 / 4096
+      }
+    }
   }
 )
 
 run_list(
-  "role[equinix]"
+  "role[equinix-ams]",
+  "role[db-master]",
+  "role[db-backup]"
 )