Add shorewall stoppedrules support

Override systemd shorewall to not use clear

Add docker support to shorewall

Ignore failures fetching external data on tile servers

nominatim: set cors headers for qa-data

Bump cookstyle from 7.18.0 to 7.20.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.18.0 to 7.20.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.18.0...v7.20.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

move spam regex to an abuse filter

enable blocklist logging for wiki administrators

Merge remote-tracking branch 'github/pull/443'

Bump cookstyle from 7.17.0 to 7.18.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.17.0 to 7.18.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.17.0...v7.18.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/441'

Bump cookstyle from 7.16.1 to 7.17.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.16.1 to 7.17.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.16.1...v7.17.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Tweak max fan speed car-alarm for hp-dl180-g6 servers

Merge remote-tracking branch 'github/pull/439'

Bump cookstyle from 7.15.4 to 7.16.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.4 to 7.16.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.4...v7.16.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix URL for Intel MAS CLI Tool

Remove role for longma

Update piwik to 4.4.1

Merge remote-tracking branch 'github/pull/438'

Bump cookstyle from 7.15.2 to 7.15.4

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.2 to 7.15.4.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.2...v7.15.4)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Update piwik to 4.4.0

Fix typo

Charge map export requests at a high rate than normal tiles

Revert "Use --ignore-engines when installing node modules with yarn"

This reverts commit c95478046eb46f37cd94e7459d4e8adf1d70b7c7.

Use --ignore-engines when installing node modules with yarn

Merge remote-tracking branch 'github/pull/437'

Bump cookstyle from 7.15.1 to 7.15.2

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.1 to 7.15.2.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.1...v7.15.2)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix path to bundler for blog aggregator

Replace trac with a redirect to github

Remove role for kokosnuss

Make imagery servers listen on IPv6

Decrease tile rate limit to 30 TPS

This is 15 TPS per server, except for pyrene which needs 30.

Now that the rate limiting is working I reviewed IPs exceeding 20
TPS on an hour basis, looking at several days, and they were all
scrapers, or fakes which I would normally block if not for the effort.
I found no non-scraping proxies or NAT.

Update Intel Mass Storage tool

Remove roles for kalessin, nidhogg and sarkany

Configure the OAuth 2 application ID for the web site

Update promscale to 0.5.1

Add IP based rate limiting to the render servers

Fix typo

Update promscale extension to 0.2.0

Add placeholder cookbook for community

Fix mapnik version attribute

Get real tile source from Fastly-Client-IP for new tile CDN

Stop handling X-Forwarded-For from old tile CDN

Configure correct mapnik load path on updated tile servers

Use URI for promscale database connection

Update promscale to 0.5.0

Remove roles for cherufe and shruikan

Use ironbelly for DNS in Amsterdam with fallback to Cloudflare

Respond with 429 to abusive "ping" requests

Merge remote-tracking branch 'github/pull/435'

Bump cookstyle from 7.15.0 to 7.15.1

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.15.0 to 7.15.1.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.15.0...v7.15.1)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/434'

Bump test-kitchen from 2.12.0 to 3.0.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.12.0 to 3.0.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/commits)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Remove roles for boitata and keizer

Merge remote-tracking branch 'github/pull/433'

Merge remote-tracking branch 'github/pull/432'

Bump kitchen-dokken from 2.13.0 to 2.14.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.13.0 to 2.14.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.13.0...v2.14.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.14.2 to 7.15.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.14.2 to 7.15.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.14.2...v7.15.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Switch tilelog to use a systemd time and run earlier in the day

Closes #431

Add dummy passwords for tilelog tests

Cleanup temporary directory

Use a virtualenv for tilelog processing

Replace tile log analyser with new one for the new CDN

Fixes #401

dns: Update dnscontrol to 3.10.1

Drop oauth test site

Merge remote-tracking branch 'github/pull/430'

Merge remote-tracking branch 'github/pull/429'

Merge remote-tracking branch 'github/pull/428'

Append to planet update log instead of overwriting

The planet update log of a run was writing over the previous log instead of appending. The log file is already rotated correctly, so it is not growing without bounds with this change.

Increase log verbosity level of planet update

Increase verbosity level of pyosmium-up-to-date in /usr/local/bin/planet-update to help finding out why it fails so often.

Run planet update for taginfo later

The planet update fails quite often for unknown reasons on the taginfo server. Maybe this is due to the process creating the hourly file running in the exact same moment or some other problem. This changes moves the cronjob a bit later to see whether it works better.

Merge remote-tracking branch 'github/pull/427'

Merge remote-tracking branch 'github/pull/426'

Bump serverspec from 2.41.7 to 2.41.8

Bumps [serverspec](http://serverspec.org/) from 2.41.7 to 2.41.8.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.13.0 to 7.14.2

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.13.0 to 7.14.2.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.13.0...v7.14.2)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Don't upgrade cgimap automatically

Disable default mod_tile configuration

Ensure assets are build before rails is restarted

Merge remote-tracking branch 'github/pull/425'

Bump serverspec from 2.41.6 to 2.41.7

Bumps [serverspec](http://serverspec.org/) from 2.41.6 to 2.41.7.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/424'

Bump serverspec from 2.41.5 to 2.41.6

Bumps [serverspec](http://serverspec.org/) from 2.41.5 to 2.41.6.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Revert "Limit the memory used by renderd"

This reverts commit 5bd9046d1c65355ebd8d56eca3183ee00e9e03b3.

Merge remote-tracking branch 'github/pull/423'

Bump kitchen-dokken from 2.12.1 to 2.13.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.12.1 to 2.13.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.12.1...v2.13.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/422'

Bump test-kitchen from 2.11.2 to 2.12.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 2.11.2 to 2.12.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v2.11.2...v2.12.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Show RSS links for main .torrent files on index page

Closes #421

tile: Enable TCP BBR again experimentally. Uplinks not congested

Revert "imagery: Add report only CSP and NEL reporting"

This reverts commit 7d41b07d2090855c7fd3117b62a1e6ecbf20b246.

imagery: Add report only CSP and NEL reporting

Remove role for fafnir

Update Intel Mass Storage tool

Limit the memory used by renderd

Add new mirror as webseed to new torrents

imagery: promote stereo to an admin

Merge remote-tracking branch 'github/pull/419'

Merge remote-tracking branch 'github/pull/418'

Bump actions/cache from 2.1.5 to 2.1.6

Bumps [actions/cache](https://github.com/actions/cache) from 2.1.5 to 2.1.6.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.5...v2.1.6)

Signed-off-by: dependabot[bot] <support@github.com>

Bump cookstyle from 7.12.5 to 7.13.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 7.12.5 to 7.13.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/master/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v7.12.5...v7.13.0)

Signed-off-by: dependabot[bot] <support@github.com>