Switch noquiklos to use an nftables firewall

[chef.git] / roles / noquiklos.rb

diff --git a/roles/noquiklos.rb b/roles/noquiklos.rb
index 036255f4f8a90e6fa0b537b5928ce9ad715f6bf7..e7078609fda16f38beb6300b6b43ca693c7ffc33 100644 (file)
--- a/roles/noquiklos.rb
+++ b/roles/noquiklos.rb
@@ -2,26 +2,31 @@ name "noquiklos"
 description "Master role applied to noquiklos"
 
 default_attributes(
+  :memcached => {
+    :memory_limit => 24 * 1024
+  },
   :networking => {
+    :firewall => {
+      :engine => "nftables"
+    },
     :interfaces => {
       :internal_ipv4 => {
-        :interface => "eth0",
+        :interface => "eth0.2801",
         :role => :internal,
         :family => :inet,
         :address => "10.0.0.13"
       },
       :external_ipv4 => {
-        :interface => "eth1",
+        :interface => "eth0.2800",
         :role => :external,
         :family => :inet,
-        :address => "128.40.45.201"
+        :address => "193.60.236.16"
       }
     }
   }
 )
 
 run_list(
-  "role[ucl-wolfson]",
-  "role[hp-dl360-g6]",
-  "role[gps-tile]"
+  "role[ucl]",
+  "role[hp-dl360-g6]"
 )