Add cleanup job for replication logs

Merge remote-tracking branch 'github/pull/466'

Bump test-kitchen from 3.1.1 to 3.2.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Ignore 509 bandwidth limit errors when computing error rates

Enable promscale for tests

Restrict alertmanager web interface to admin users

Switch to using upstream builds for prometheus and alertmanager

Fix scoping of File.exist?

Move exporters to /opt/prometheus-exporters

Disable promscale for now

Add alerts for planet dumps and replication feeds

Remove roles for chrysophylax, fume and vipertooth

Use snap-02 as the readonly database for dublin for now

Increase WAL sender limit for main database

Add dublin to database ACLs

Avoid restarting a non-existent service

Monitor planet files

Order attributes

Add support for monitoring files with filestat_exporter

Merge remote-tracking branch 'github/pull/465'

Add alert rules for degraded mdadm arrays and API error rate

Bump cookstyle from 7.25.9 to 7.25.10

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.25.9 to 7.25.10.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.25.9...v7.25.10)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Add alert for failed services

Add dublin to rsync allow lists

Disable dhcp server for IPv6

Add alerts for filesystems low on space

Add some SMART alert rules

Enable discretereading workaround in ipmi_exporter for older HPs

Handle machines with a single interface

Fix path to lldpctl

Improve layout of LLDP data

Add an ohai plugin to gather LLDP data

Install nvme-cli on machines with nvme disks

Add OOB SSH host keys for horntail, norbert and snap-03

Add OOB MAC address for norbert

Add OOB MAC addresses for horntail and snap-03

Update interface list for snap-03

Update interface lists for horntail and norbert

Revert "Correct paths to tftp root directory"

This reverts commit 8a0ca3821816069cb36d6d101de0214f6d6abce0.

Correct paths to tftp root directory

Merge remote-tracking branch 'github/pull/464'

Add PXE boot support using ipxe netboot.xyz

Use kitchen? instead of looking for TEST_KITCHEN in the environent

Don't try and install kernel modules when running tests

Increase maximum number of SMTP connections on shenron

Add roles for horntail and norbert

Blacklist acpi_power_meter on G6 machines

Modernise force loading of modules

Fix loading of new kernel modules

Load acpi_ipmi if ipmi_si and acpi_power_meter are present

Add argon2 test site

Add role for nidhogg

nominatim: do not start maintenance trigger

Merge remote-tracking branch 'github/pull/461'

Bump actions/checkout from 2.3.5 to 2.4.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: need to start maintenance trigger

nominatim: need to start the maintenance trigger

fix typo

nominatim: force maintenance job to run at UTC time

overpass: fix diff computation variable in munin graph

overpass: better labels for munin graphs

overpass: add munin scripts

Configure production site to use query.openstreetmap.org

Allow overpass_url to be configured for the rails_port resource

Remove no longer used osrm_url attribute for rails_port resource

Update promscale to 0.6.2

Enable thumbnail caching for images from wikimedia commons

Merge remote-tracking branch 'github/pull/460'

Bump cookstyle from 7.25.8 to 7.25.9

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.25.8 to 7.25.9.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.25.8...v7.25.9)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

put stormfly-04 back into production

Merge remote-tracking branch 'github/pull/456'

Merge remote-tracking branch 'github/pull/459'

Bump test-kitchen from 3.1.0 to 3.1.1

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Improve messages in civicrm osmf-verify-contributor plugin

New civicrm plug-ins for oauth authentication of members

This should enable MWG to automate processing of active mapper
applications

Remove unneeded sitepress-multilingual-cms

Add missing php module needed by civicrm

Update civicrm and some of its plugins

disable parallel workers on nominatim

Reduce TOTP lookbehind

Use an equality match for TOTP validation

dulcy: reduce work_mem

Add TOTP token enforcement to overpass

Convert some archive unpacking to use archive_file

Disable default apache site on overpass servers

Merge remote-tracking branch 'github/pull/455'

Update zshrc for tomh

stormfly-04: enable ICU tokenizer

Merge remote-tracking branch 'github/pull/458'

Merge remote-tracking branch 'github/pull/457'

Bump kitchen-dokken from 2.15.0 to 2.16.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.15.0...v2.16.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.25.6 to 7.25.8

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.25.6 to 7.25.8.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.25.6...v7.25.8)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

switch stormfly to import mode and use PG14

add overpass cookbook

Adds a cookbook to run an updateable overpass. The cookbook
is in theory able to install a fully-featured overpass API.
The new role 'overpass-query' sets up a reduced version only
suitable for running queries for the query feature on the
main site.

Sets role up on gorwen.

put dulcy back into production mode

Merge remote-tracking branch 'github/pull/454'

Bump kitchen-dokken from 2.14.0 to 2.15.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.14.0 to 2.15.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.14.0...v2.15.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

put dulcy in import mode and switch to postgresql 14

put pummelzacken back into production

Add firefishy wireguard peer