X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/ff044920428608b2c04507ad52d6ab52c9d6555f..d83a578b0a84690a1ec89ffec1a1b40330aa3ead:/roles/ironbelly.rb diff --git a/roles/ironbelly.rb b/roles/ironbelly.rb index 06876abbb..38bc9edb8 100644 --- a/roles/ironbelly.rb +++ b/roles/ironbelly.rb @@ -3,13 +3,24 @@ description "Master role applied to ironbelly" default_attributes( :apt => { - :sources => [ "ubuntugis-unstable" ] + :sources => ["ubuntugis-unstable"] }, - :git => { - :allowed_nodes => "*:*", - :user => "chefrepo", - :group => "chefrepo", - :backup => "chef-git" + :elasticsearch => { + :cluster => { + :routing => { + :allocation => { + :disk => { + :watermark => { + :low => "95%", + :high => "98%" + } + } + } + } + }, + :path => { + :data => "/store/elasticsearch" + } }, :networking => { :interfaces => { @@ -42,9 +53,27 @@ default_attributes( :peer => { :host => "ridley.openstreetmap.org" } + }, + :aws2ic => { + :port => "1195", + :mode => "server", + :peer => { + :host => "fafnir.openstreetmap.org" + } + }, + :ic2bm => { + :port => "1196", + :mode => "client", + :peer => { + :host => "grisu.openstreetmap.org", + :port => "1194" + } } } }, + :planet => { + :replication => "enabled" + }, :rsyncd => { :modules => { :hosts => { @@ -72,11 +101,13 @@ default_attributes( :gid => "www-data", :transfer_logging => false, :hosts_allow => [ - "128.40.168.0/24", # ucl external (wates) - "128.40.45.192/27", # ucl external (wolfson) + "193.60.236.0/24", # ucl external "146.179.159.160/27", # ic internal "193.63.75.96/27", # ic external "2001:630:12:500::/64", # ic external + "10.0.32.0/20", # bytemark internal + "89.16.162.16/28", # bytemark external + "2001:41c9:2:d6::/64", # bytemark external "127.0.0.0/8", # localhost "::1" # localhost ], @@ -84,21 +115,19 @@ default_attributes( } } } -); +) run_list( "role[ic]", "role[gateway]", - "role[chef-server]", - "role[chef-repository]", "role[web-storage]", "role[supybot]", "role[backup]", "role[stats]", "role[planet]", "role[planetdump]", + "role[logstash]", "recipe[rsyncd]", "recipe[openvpn]", - "recipe[git::server]", "recipe[tilelog]" )