Stop fight chef-server over configuration file permissions

[chef.git] / roles / planet.rb

diff --git a/roles/planet.rb b/roles/planet.rb
index 4c2045388d620f61f4070b3b01b5e0f9c4050166..889f0bb0e90df79836e185a6e4b92e78a55088a3 100644 (file)
--- a/roles/planet.rb
+++ b/roles/planet.rb
@@ -6,8 +6,8 @@ default_attributes(
     :users => {
       :bretth => { :status => :user },
       :planet => {
-        :status => :role,
-        :members => [ :bretth ]
+        :status => :administrator,
+        :members => [:bretth]
       }
     }
   },
@@ -22,27 +22,35 @@ default_attributes(
         :uid => "nobody",
         :gid => "nogroup",
         :transfer_logging => false,
-        :exclude => [ ".*" ],
+        :exclude => [".*"],
         :max_connections => 10,
         :ignore_errors => true,
         :ignore_nonreadable => true,
         :timeout => 3600,
-        :refuse_options => [ "checksum" ]
+        :refuse_options => ["checksum"]
       }
     }
   },
+  :networking => {
+    :firewall => {
+      :http_connection_limit => 10
+    }
+  },
   :apache => {
-    :mpm => "event",
-    :keepalive => false,
+    :mpm => "worker",
+    :keepalive => true,
     :event => {
       :server_limit => 20,
-      :max_clients => 1000,
-      :threads_per_child => 50
+      :max_request_workers => 1000,
+      :threads_per_child => 50,
+      :min_spare_threads => 75,
+      :max_spare_threads => 525
     }
   }
 )
 
 run_list(
+  "role[web-db]",
   "recipe[planet]",
   "recipe[planet::replication]",
   "recipe[nfs::server]",