Disable DNSSEC validation on shenron

[chef.git] / roles / db.rb

diff --git a/roles/db.rb b/roles/db.rb
index e3df5d3d796b4869fa09c16bbee24223196afc63..dbcf4baa6b0f5c47cf0c22d4a88b160d6b642623 100644 (file)
--- a/roles/db.rb
+++ b/roles/db.rb
@@ -10,6 +10,11 @@ default_attributes(
       }
     }
   },
       }
     }
   },

+  :apt => {
+    :unattended_upgrades => {
+      :enable => false
+    }
+  },

   :munin => {
     :plugins => {
       :postgres_connections_openstreetmap => {
   :munin => {
     :plugins => {
       :postgres_connections_openstreetmap => {


@@ -34,18 +39,20 @@ default_attributes(
     "/store/rails" => { :host => "ironbelly", :path => "/store/rails" }
   },
   :postgresql => {
     "/store/rails" => { :host => "ironbelly", :path => "/store/rails" }
   },
   :postgresql => {

-    :versions => ["9.1"],

     :settings => {
       :defaults => {
         :listen_addresses => "*",
     :settings => {
       :defaults => {
         :listen_addresses => "*",

-        :max_connections => "500",
+        :max_connections => "1000",

         :max_stack_depth => "7MB",
         :checkpoint_segments => "32",
         :max_stack_depth => "7MB",
         :checkpoint_segments => "32",

+        :max_wal_size => "1536MB",

         :checkpoint_completion_target => "0.8",
         :cpu_tuple_cost => "0.1",
         :checkpoint_completion_target => "0.8",
         :cpu_tuple_cost => "0.1",

+        :log_min_duration_statement => "1000",

         :late_authentication_rules => [
         :late_authentication_rules => [

-          { :address => "146.179.159.160/27" },
-          { :address => "193.63.75.96/27" }
+          { :address => "10.0.32.0/20" },
+          { :address => "10.0.48.0/20" },
+          { :address => "10.0.64.0/20" }

         ]
       }
     }
         ]
       }
     }