Add monitoring for unfrozen IDs in postgres databases

Merge remote-tracking branch 'github/pull/397'

Merge remote-tracking branch 'github/pull/396'

add certificate for nominatim.qgis.org

Bump kitchen-dokken from 2.12.0 to 2.12.1

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.12.0...v2.12.1)

Signed-off-by: dependabot[bot] <support@github.com>

Bump test-kitchen from 2.10.0 to 2.11.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.10.0 to 2.11.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v2.10.0...v2.11.0)

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.2.1

Add some additional prometheus alerts

Switch forum to use a custom FPM pool with prometheus monitoring

nominatim: be a bit more lenient before banning

Use elasticsearch 6.x repsitory for filebeat

nominatim: location of config file for nominatim-ui has changed

Revert org.civicoop.emailapi to a version that actually exists

Switch wikis to use elasticsearch 6.x

civicrm + extensions version bump

Only use tagged minor versions of mediawiki

Do all mail deliveries via a controlled set of queues

spamassassin: increase max children and increase max spare to decrease churn

Add comments to minutely state files

Merge remote-tracking branch 'github/pull/395'

Bump kitchen-dokken from 2.11.2 to 2.12.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.11.2 to 2.12.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.11.2...v2.12.0)

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.2.0

Deploy 2021 State of the Map site

Remove cleanup code

Switch back to online mode

Switch minutely replication to use osmdbt

Switch to api_readonly mode

Lock osmdbt postgres plugin to v0.2

Remove tilecache role from saphira and toothless

Collect metrics from promscale

Tighten memory limits for imagery servers

Merge remote-tracking branch 'github/pull/393'

Bump cookstyle from 7.8.0 to 7.8.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.8.0 to 7.8.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.8.0...v7.8.3)

Signed-off-by: dependabot[bot] <support@github.com>

Move rhaegal back to the main replication feed

Add additional alerting rules

Merge remote-tracking branch 'github/pull/392'

Bump cookstyle from 7.7.2 to 7.8.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.7.2 to 7.8.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.7.2...v7.8.0)

Signed-off-by: dependabot[bot] <support@github.com>

Increase postgres connection limit on errol

Remove role for waima

Log autovacuums for promscale

Add some more prometheus alerts

Remove old cleanup code

Tighten memory limits for imagery servers

nominatim: do not compile immediately after checkout

The country grid needs to be downloaded first.

nominatim: download country grid before building

nominatim: also download us postcode data

Also put external data into build directory as per new project
layouts.

nominatim: switch to nominatim-ui fork on git.osm.org

Add domain labels to SSL exporter metrics

Move promscale tuning to role and tune WAL sizes

Put postgres stats directory on a tmpfs

Merge remote-tracking branch 'github/pull/391'

Bump actions/setup-ruby from v1.1.2 to v1.1.3

Bumps [actions/setup-ruby](https://github.com/actions/setup-ruby) from v1.1.2 to v1.1.3.
- [Release notes](https://github.com/actions/setup-ruby/releases)
- [Commits](https://github.com/actions/setup-ruby/compare/v1.1.2...e932e7af67fc4a8fc77bd86b744acd4e42fe3543)

Signed-off-by: dependabot[bot] <support@github.com>

Enable ssl_exporter to monitor SSL certificates

Update promscale to 0.2.0

Tune prometheus remote write queues

Merge remote-tracking branch 'github/pull/390'

Bump actions/cache from v2 to v2.1.4

Bumps [actions/cache](https://github.com/actions/cache) from v2 to v2.1.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2...26968a09c0ea4f3e233fdddbafd1166051a095f6)

Signed-off-by: dependabot[bot] <support@github.com>

Prevent multiple low zoom renders running together

Allow the translation of MediaWiki sidebar

Add CyclOSM tile layer to wiki maps

establish confirmed user's group in public wikis

Make sure we use the correct gem and bundler for blogs

Switch blogs.openstreetmap.org to bundler 2.x

Fix cookstyle warnings

Merge remote-tracking branch 'github/pull/388'

Block faked Chrome 34 user agent from planet

Add wiki to trusted sendmail users

mediawiki: enable noreply config

Enable noreply config in attempt to reduce bounce emails.

civicrm version bump

Bump cookstyle from 7.6.1 to 7.7.2

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.6.1 to 7.7.2.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.6.1...v7.7.2)

Signed-off-by: dependabot[bot] <support@github.com>

Disable table monitor for promscale postgres instance

Add mac .DS_Store git gitignore

Merge remote-tracking branch 'github/pull/387'

Bump cookstyle from 7.5.3 to 7.6.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.5.3 to 7.6.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.5.3...v7.6.1)

Signed-off-by: dependabot[bot] <support@github.com>

Disable API writes via cgimap when in readonly mode

nominatim: add dotenv for python

nominatim: switch to using nominatim tool

Update carto stylesheet to v5.3.0

Closes #386

Update backup ACLs for OSUOSL machines

Remove stormfly-01 and stormfly-02 roles

Avoid changing postgres configuration on prometheus clients

Exclude some exporter metrics from promscale archiving

Enable promscale maintenance timer

Enable remote write to promscale

Remove prometheus role from tiamat-11

Establish wireguard tunnels from gateways to prometheus servers

Repurpose stormfly-03 as a prometheus server

Improve alert readability

Add some additional alert rules

Add backup script for prometheus

Configure server URL for amtool

Remove role for culebre

Ignore failures updating fastly IP list

Ignore wild voltage sensor on shenron

Apply relabelling to correct jobs

Ignore disconnected fans on errol

Add infrastructure to support relabelling metrics

Add some alert rules for prometheus

Send notifications of resolved alerts

Group prometheus alerts by the alertgroup label