description "Master role applied to ironbelly"
default_attributes(
+ :dhcpd => {
+ :first_address => "10.0.63.1",
+ :last_address => "10.0.63.254"
+ },
+ :elasticsearch => {
+ :cluster => {
+ :routing => {
+ :allocation => {
+ :disk => {
+ :watermark => {
+ :low => "95%",
+ :high => "98%",
+ :flood_stage => "99%"
+ }
+ }
+ }
+ }
+ },
+ :path => {
+ :data => "/store/elasticsearch"
+ }
+ },
:networking => {
:interfaces => {
- :internal_ipv4 => {
- :interface => "eth0",
+ :internal => {
+ :interface => "bond0",
:role => :internal,
- :family => :inet,
- :address => "146.179.159.177"
- },
- :external_ipv4 => {
- :interface => "eth1",
- :role => :external,
- :family => :inet,
- :address => "193.63.75.107"
+ :inet => {
+ :address => "10.0.48.10"
+ },
+ :bond => {
+ :mode => "802.3ad",
+ :lacprate => "fast",
+ :xmithashpolicy => "layer3+4",
+ :slaves => %w[enp2s0f0 enp2s0f1]
+ }
},
- :external_ipv6 => {
- :interface => "eth1",
+ :external => {
+ :interface => "bond0.3",
:role => :external,
- :family => :inet6,
- :address => "2001:630:12:500:225:90ff:fec4:f6ef"
+ :inet => {
+ :address => "184.104.179.138"
+ },
+ :inet6 => {
+ :address => "2001:470:1:fa1::a"
+ }
}
}
},
- :openvpn => {
- :address => "10.0.16.2",
- :tunnels => {
- :ic2ucl => {
- :port => "1194",
- :mode => "server",
- :peer => {
- :host => "ridley.openstreetmap.org"
- }
+ :prometheus => {
+ :junos => {
+ "switch1" => { :address => "184.104.179.129", :labels => { "site" => "amsterdam" } }
+ },
+ :snmp => {
+ "pdu1" => { :address => "10.0.48.100", :modules => %w[apcups], :labels => { "site" => "amsterdam" } },
+ "pdu2" => { :address => "10.0.48.101", :modules => %w[apcups], :labels => { "site" => "amsterdam" } }
+ },
+ :metrics => {
+ :uplink_interface => {
+ :help => "Site uplink interface name",
+ :labels => { :site => "amsterdam", :name => "ge-[01]/2/[02]" }
+ }
+ }
+ },
+ :nginx => {
+ :cache => {
+ :proxy => {
+ :enable => true,
+ :keys_zone => "proxy_cache_zone:256M",
+ :inactive => "180d",
+ :max_size => "51200M"
}
}
}
-);
+)
run_list(
- "role[ic]",
+ "role[equinix-ams]",
"role[gateway]",
- "recipe[openvpn]"
+ "recipe[rsyncd]",
+ "recipe[dhcpd]"
)