Merge remote-tracking branch 'github/pull/749'

diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb
index 3a19d8a91662cfd83f7dd1bcbcb281e0bd532798..0ec59c8b3d8d65d23a63db109974ae204fb358a4 100644 (file)
--- a/cookbooks/dns/recipes/default.rb
+++ b/cookbooks/dns/recipes/default.rb
@@ -42,7 +42,7 @@ package %w[
 
 cache_dir = Chef::Config[:file_cache_path]
 
-dnscontrol_version = "4.15.5"
+dnscontrol_version = "4.17.0"
 
 dnscontrol_arch = if arm?
                     "arm64"

diff --git a/cookbooks/networking/attributes/default.rb b/cookbooks/networking/attributes/default.rb
index 7ff93c36582b1b3f31df59c5a85218a0d5e8c4ff..06511d462f464e6925463629522b402f53c22611 100644 (file)
--- a/cookbooks/networking/attributes/default.rb
+++ b/cookbooks/networking/attributes/default.rb
@@ -9,7 +9,7 @@ default[:networking][:firewall][:allowlist] = []
 default[:networking][:interfaces] = {}
 default[:networking][:nameservers] = %w[8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844]
 default[:networking][:search] = []
-default[:networking][:dnssec] = "allow-downgrade"
+default[:networking][:dnssec] = "false"
 default[:networking][:hostname] = node.name
 default[:networking][:wireguard][:enabled] = true
 default[:networking][:wireguard][:keepalive] = 180

diff --git a/roles/wiki.rb b/roles/wiki.rb
index 19a31e3dbf55ad583b6f832405fe0ef42870636d..652726346ce571c657072f162a05980c5713f074 100644 (file)
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -59,7 +59,7 @@ default_attributes(
       :mysqld => {
         :innodb_buffer_pool_size => "4G",
         :key_buffer_size => "64M",
-        :max_connections => "500",
+        :max_connections => "800",
         :sort_buffer_size => "8M",
         :tmp_table_size => "128M"
       }