Allow read access for www-data to support the export script

Use the packaged systemd service for renderd

Add reverse DNS for internal hosts at Equinix Dublin

Add roles for Equinix Dublin machines

Add equinix-dub role

Remove list of backends which is no longer used

Rename equinix role to equinix-ams

Update foundation wikis to 1.35

Update Intel Mass Storage tool

Merge remote-tracking branch 'github/pull/449'

Bump cookstyle from 7.23.0 to 7.24.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.23.0 to 7.24.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.23.0...v7.24.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/448'

Bump cookstyle from 7.22.3 to 7.23.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.22.3 to 7.23.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.22.3...v7.23.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: add nightly updates for QA tiles

nominatim: fix link location

nominatim: properly link to current qa data

nominatim: fix rule name

nominatim: add qa tile generation

Move remaining test to Ubuntu 20.04

Drop some conditional support for Ubuntu 18.04

Switch operations site to use ruby 2.8 and bundler 2.x

Drop no longer support mysql configuration options

Merge remote-tracking branch 'github/pull/447'

update civicrm to 5.40.4

Merge remote-tracking branch 'github/pull/446'

Bump cookstyle from 7.21.0 to 7.22.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.21.0 to 7.22.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.21.0...v7.22.3)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix new cookstyle warnings

Merge remote-tracking branch 'github/pull/445'

Bump cookstyle from 7.20.0 to 7.21.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.20.0 to 7.21.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.20.0...v7.21.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/440'

Add shorewall stoppedrules support

Override systemd shorewall to not use clear

Add docker support to shorewall

Ignore failures fetching external data on tile servers

nominatim: set cors headers for qa-data

Bump cookstyle from 7.18.0 to 7.20.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.18.0 to 7.20.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.18.0...v7.20.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

move spam regex to an abuse filter

enable blocklist logging for wiki administrators

Merge remote-tracking branch 'github/pull/443'

Bump cookstyle from 7.17.0 to 7.18.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.17.0 to 7.18.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.17.0...v7.18.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/441'

Bump cookstyle from 7.16.1 to 7.17.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.16.1 to 7.17.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.16.1...v7.17.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Tweak max fan speed car-alarm for hp-dl180-g6 servers

Merge remote-tracking branch 'github/pull/439'

Bump cookstyle from 7.15.4 to 7.16.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.4 to 7.16.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.4...v7.16.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix URL for Intel MAS CLI Tool

Remove role for longma

Update piwik to 4.4.1

Merge remote-tracking branch 'github/pull/438'

Bump cookstyle from 7.15.2 to 7.15.4

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.2 to 7.15.4.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.2...v7.15.4)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.4.0

Fix typo

Charge map export requests at a high rate than normal tiles

Revert "Use --ignore-engines when installing node modules with yarn"

This reverts commit c95478046eb46f37cd94e7459d4e8adf1d70b7c7.

Use --ignore-engines when installing node modules with yarn

Merge remote-tracking branch 'github/pull/437'

Bump cookstyle from 7.15.1 to 7.15.2

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.1 to 7.15.2.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.1...v7.15.2)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix path to bundler for blog aggregator

Replace trac with a redirect to github

Remove role for kokosnuss

Make imagery servers listen on IPv6

Decrease tile rate limit to 30 TPS

This is 15 TPS per server, except for pyrene which needs 30.

Now that the rate limiting is working I reviewed IPs exceeding 20
TPS on an hour basis, looking at several days, and they were all
scrapers, or fakes which I would normally block if not for the effort.
I found no non-scraping proxies or NAT.

Update Intel Mass Storage tool

Remove roles for kalessin, nidhogg and sarkany

Configure the OAuth 2 application ID for the web site

Update promscale to 0.5.1

Add IP based rate limiting to the render servers

Fix typo

Update promscale extension to 0.2.0

Add placeholder cookbook for community

Fix mapnik version attribute

Get real tile source from Fastly-Client-IP for new tile CDN

Stop handling X-Forwarded-For from old tile CDN

Configure correct mapnik load path on updated tile servers

Use URI for promscale database connection

Update promscale to 0.5.0

Remove roles for cherufe and shruikan

Use ironbelly for DNS in Amsterdam with fallback to Cloudflare

Respond with 429 to abusive "ping" requests

Merge remote-tracking branch 'github/pull/435'

Bump cookstyle from 7.15.0 to 7.15.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.0 to 7.15.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.0...v7.15.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/434'

Bump test-kitchen from 2.12.0 to 3.0.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.12.0 to 3.0.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/commits)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Remove roles for boitata and keizer

Merge remote-tracking branch 'github/pull/433'

Merge remote-tracking branch 'github/pull/432'

Bump kitchen-dokken from 2.13.0 to 2.14.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.13.0 to 2.14.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.13.0...v2.14.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.14.2 to 7.15.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.14.2 to 7.15.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.14.2...v7.15.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Switch tilelog to use a systemd time and run earlier in the day

Closes #431

Add dummy passwords for tilelog tests

Cleanup temporary directory

Use a virtualenv for tilelog processing

Replace tile log analyser with new one for the new CDN

Fixes #401

dns: Update dnscontrol to 3.10.1

Drop oauth test site

Merge remote-tracking branch 'github/pull/430'

Merge remote-tracking branch 'github/pull/429'

Merge remote-tracking branch 'github/pull/428'

Append to planet update log instead of overwriting

The planet update log of a run was writing over the previous log instead of appending. The log file is already rotated correctly, so it is not growing without bounds with this change.

Increase log verbosity level of planet update

Increase verbosity level of pyosmium-up-to-date in /usr/local/bin/planet-update to help finding out why it fails so often.