Use a letsencrypt certificate for the main mail server

[chef.git] / roles / thorn-03.rb

diff --git a/roles/thorn-03.rb b/roles/thorn-03.rb
index cf1d721a986b9d8c1c159a9497f6b1fcc2b30d35..954abeec3639bd52f7c627ad1257b35fc71d45ee 100644 (file)
--- a/roles/thorn-03.rb
+++ b/roles/thorn-03.rb
@@ -5,17 +5,28 @@ default_attributes(
   :networking => {
     :interfaces => {
       :internal_ipv4 => {
-        :interface => "eth0",
+        :interface => "bond0",
         :role => :internal,
         :family => :inet,
-        :address => "146.179.159.167"
+        :address => "10.0.48.53",
+        :bond => {
+          :slaves => %w[eth0 eth1]
+        }
+      }
+    }
+  },
+  :sysctl => {
+    :ipv6_autoconf => {
+      :comment => "Disable IPv6 auto-configuration on internal interface",
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
       }
     }
   }
 )
 
 run_list(
-  "role[ic]",
-  "role[hp-g5]",
+  "role[equinix]",
   "role[web-backend]"
 )