openssh: disable password authentication by default (except dev)

nominatim: add two more servers for gnome

Add planet role to horntail and norbert

Deploy 2022 State of the Map site

community: Bump discourse to v2.8.2

community: Add communities alias

supybot: fix cgimap repo links

supybot: fix git branches to follow

Merge remote-tracking branch 'github/pull/488'

Bump actions/cache from 2.1.7 to 3

Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Avoid template expansion errors

Allow piwik to use LOAD DATA INFILE for improved performance

Switch piwik database to utf8mb4

Block access to some piwik internals

Update piwik plugins list

Install systemd-coredump everywhere

Copy planetdump output to admins list

Add antonkh as a user on dev

Configure prometheus scraping for discourse servers

Add prometheus plugin to discourse

community: fix backup script typo

Expire discourse backups

community: Add initial backup script

community: dummy change to retry chef update

community: fix order of triggers, data before web

Switch community role from lockheed -> jakelong

exim: web auto-reply mention community site

community: route mail to jakelong

Fix noreply body lookup

Remove render server role from rhaegal

mail: fix typo on community.openstreetmap.org domain

mail: improve config key

community: add mail receiver API key

community: fix acme cert redirect. Add DB backup

community: fix certificate paths

community: workaround git tag checkout bug

Use dedicated port for discourse mail-receiver service

Improve community autoreply text

Add email handling and fixes

Extend chef discourse/community management

Update promscale extension to 0.3.2

Update piwik to 4.8.0

Force database drops on postgres versions which support it

Stop rails-jobs service when cleaning up old APIs

Make sure old APIs are cleaned up on dev

Drop kernel tuning parameter that is not supported in recent kernels

Merge remote-tracking branch 'github/pull/486'

Do not create temporary planet file when update was not complete

When the update of the planet file was not complete (when
pyosmium-up-to-date returns 1), the resulting planet is nevertheless
usable, so we can keep it instead of creating a temporary one. This way
we use less disk space because there is one fewer copy of the planet
around.

Merge remote-tracking branch 'github/pull/485'

Bump cookstyle from 7.32.0 to 7.32.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.32.0 to 7.32.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.32.0...v7.32.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Drop GPX directory on database servers

Drop munin NFS plugins

Drop NFS cookbook

Drop NFS server role from planet servers

Drop web-storage role

Drop NFS mount from database servers

Drop NFS mounts from web servers

Fix mailing of daily statistics

Fix mail route name

Merge remote-tracking branch 'github/pull/484'

Bump actions/checkout from 2.4.0 to 3

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Increase maximum WAL senders

Revert snap-02 to being a slave database

Only configure postgres clusters which actually exist

Make snap-02 a database master

Add postgres 14 to snap-02

Build database extensions for all installed postgres versions

Increase some warning thresholds on stormfly-03

Add alert for job processing rate

Add my ed25519 ssh keys

Merge remote-tracking branch 'github/pull/482'

Bump cookstyle from 7.31.7 to 7.32.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.31.7 to 7.32.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.31.7...v7.32.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Move the daily statistics to be served from planet.openstreetmap.org

Disable Chef/Modernize/CronDFileOrTemplate for now

Bump cookstyle from 7.31.3 to 7.31.7

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.31.3 to 7.31.7.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.31.3...v7.31.7)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Switch master database to use wal-g instead of wal-e

Switch gpx-update to the openstreetmap repository

Make gpx-updater track master

Update github URLs for gpx tile code

Enable promscale

Update promscale to 0.10.0

Use upstream packages for promscale extension

Switch slave databases to use wal-g instead of wal-e

Increase postgres connection limit

Drop the bulk upload dev site

Install a yarn wrapper to keep rails 7 happy

Configure API limits for dev instances

Configure API limits explicitly for both rails and cgimap

Enable BBR at Dublin with sufficient uplink and switch capacity

overpass: add logrotation

Fix configuration of S3 URLs for security policy

Add configuration for GPS trace storage

nominatim: add daily house number cleanup

Merge remote-tracking branch 'github/pull/479'

Bump cookstyle from 7.31.1 to 7.31.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.31.1 to 7.31.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.31.1...v7.31.3)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: change IP of gnome proxy

Update piwik to 4.7.1

Merge remote-tracking branch 'github/pull/478'

Bump serverspec from 2.41.8 to 2.42.0

Bumps [serverspec](http://serverspec.org/) from 2.41.8 to 2.42.0.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.7.0