Allow openvpn connections over IPv6

[chef.git] / roles / rhaegal.rb

diff --git a/roles/rhaegal.rb b/roles/rhaegal.rb
index 4fe02e110a72b2f3bf67ba506f798706518376e6..12ccf15eba8be4310b5d44084285af83774bdff5 100644 (file)
--- a/roles/rhaegal.rb
+++ b/roles/rhaegal.rb
@@ -2,6 +2,27 @@ name "rhaegal"
 description "Master role applied to rhaegal"
 
 default_attributes(
+  :accounts => {
+    :users => {
+      :mmiler => { :status => :administrator }
+    }
+  },
+  :apt => {
+    :sources => ["postgresql"]
+  },
+  :devices => {
+    :ssd_samsung => {
+      :comment => "Tune scheduler for SSD",
+      :type => "block",
+      :bus => "ata",
+      :serial => "Samsung_SSD_860_PRO_*",
+      :attrs => {
+        "queue/scheduler" => "noop",
+        "queue/nr_requests" => "256",
+        "queue/read_ahead_kb" => "2048"
+      }
+    }
+  },
   :location => "Zagreb, Croatia",
   :networking => {
     :interfaces => {
@@ -18,9 +39,43 @@ default_attributes(
       "10.5.0.7",
       "8.8.8.8"
     ]
+  },
+  :postgresql => {
+    :versions => ["10"],
+    :settings => {
+      :defaults => {
+        :shared_buffers => "8GB",
+        :maintenance_work_mem => "7144MB",
+        :effective_cache_size => "16GB"
+      }
+    }
+  },
+  :sysctl => {
+    :postgres => {
+      :comment => "Increase shared memory for postgres",
+      :parameters => {
+        "kernel.shmmax" => 9 * 1024 * 1024 * 1024,
+        "kernel.shmall" => 9 * 1024 * 1024 * 1024 / 4096
+      }
+    }
+  },
+  :tile => {
+    :database => {
+      :cluster => "10/main",
+      :postgis => "2.4"
+    },
+    :node_file => "/store/database/nodes",
+    :styles => {
+      :default => {
+        :tile_directories => [
+          { :name => "/store/tiles/default", :min_zoom => 0, :max_zoom => 19 }
+        ]
+      }
+    }
   }
 )
 
 run_list(
-  "role[carnet]"
+  "role[carnet]",
+  "role[tile]"
 )