From: Tom Hughes <tom@compton.nu>
Date: Mon, 10 Mar 2025 00:44:45 +0000 (+0000)
Subject: Merge remote-tracking branch 'github/pull/749'
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/refs/heads/master?hp=798b617b375179b76e65920fed450a5ab2325f37

Merge remote-tracking branch 'github/pull/749'
---

diff --git a/cookbooks/dns/recipes/default.rb b/cookbooks/dns/recipes/default.rb
index 3a19d8a91..0ec59c8b3 100644
--- a/cookbooks/dns/recipes/default.rb
+++ b/cookbooks/dns/recipes/default.rb
@@ -42,7 +42,7 @@ package %w[
 
 cache_dir = Chef::Config[:file_cache_path]
 
-dnscontrol_version = "4.15.5"
+dnscontrol_version = "4.17.0"
 
 dnscontrol_arch = if arm?
                     "arm64"
diff --git a/cookbooks/networking/attributes/default.rb b/cookbooks/networking/attributes/default.rb
index 7ff93c365..06511d462 100644
--- a/cookbooks/networking/attributes/default.rb
+++ b/cookbooks/networking/attributes/default.rb
@@ -9,7 +9,7 @@ default[:networking][:firewall][:allowlist] = []
 default[:networking][:interfaces] = {}
 default[:networking][:nameservers] = %w[8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844]
 default[:networking][:search] = []
-default[:networking][:dnssec] = "allow-downgrade"
+default[:networking][:dnssec] = "false"
 default[:networking][:hostname] = node.name
 default[:networking][:wireguard][:enabled] = true
 default[:networking][:wireguard][:keepalive] = 180
diff --git a/roles/wiki.rb b/roles/wiki.rb
index 19a31e3db..652726346 100644
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -59,7 +59,7 @@ default_attributes(
       :mysqld => {
         :innodb_buffer_pool_size => "4G",
         :key_buffer_size => "64M",
-        :max_connections => "500",
+        :max_connections => "800",
         :sort_buffer_size => "8M",
         :tmp_table_size => "128M"
       }