Allow CAP_SYS_RAWIO for the ohai collector

Monitor battery/capacitor status for HP RAID controller

Merge remote-tracking branch 'github/pull/582'

tile: clean up old static files

These files are either no longer used, or have whitespace cleanups.

community: use sudo to install plugins

Signed-off-by: Grant Slater <github@firefishy.com>

Move remaining planet serving work to norbert

Move planetdump role to norbert

Remove backup role from ironbelly

Add backup role to norbert

nominatim: add static files to serve in production

These came previously with the OSMF-specific Nominatim source code.
This doesn't work anymore since the project directory is used for
serving.

Remove cleanup code

foundation: use noreply wiki sender

hardware: Do not scale CPU frequency for niced processes

Signed-off-by: Grant Slater <github@firefishy.com>

Reduce sensitivity of postgres replication alarms

Merge remote-tracking branch 'github/pull/572'

build(deps): bump serverspec from 2.42.1 to 2.42.2

Bumps [serverspec](http://serverspec.org/) from 2.42.1 to 2.42.2.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

serverinfo: fix run order

serverinfo: fix vendor folder

serverinfo: Do not install gems as root

Fix name of stateofthemap site

Merge remote-tracking branch 'github/pull/580'

Remove tile per IP rate limiting

With the ability to ratelimit on the CDN, this is no longer necessary

hardware: Change CPU energy_perf_bias performance -> balance-performance

Signed-off-by: Grant Slater <github@firefishy.com>

Switch containerised sites to use podman_site

Add podman_site resource

Merge remote-tracking branch 'github/pull/579'

stateofthemap: Move Chooser to container

Signed-off-by: Grant Slater <github@firefishy.com>

svn: Move to container

Signed-off-by: Grant Slater <github@firefishy.com>

trac: Move to container

Signed-off-by: Grant Slater <github@firefishy.com>

Fix rubocop rule name

Fix reloading of timers

Don't require description for timers

Modify existing podman update timer instead of creating a new one

Add dropin support for systemd timers

podman: Increase podman-auto-update.service frequency

Merge remote-tracking branch 'github/pull/578'

Move switch2osm role from ridley -> naga

switch2osm: Use container

Signed-off-by: Grant Slater <github@firefishy.com>

sotm: increase docker_external_port offset

Merge remote-tracking branch 'github/pull/573'

Merge remote-tracking branch 'github/pull/577'

Merge remote-tracking branch 'github/pull/575'

irc: Use container

Signed-off-by: Grant Slater <github@firefishy.com>

trac: remove unused files

Use SotM 2013 container and rename jekyll recipe to container

Signed-off-by: Grant Slater <github@firefishy.com>

Move foundation::owg to naga

Use operations.osmfoundation.org container

Activation of "Catwatch"

implements openstreetmap/operations#351

Move jekyll based stateofthe map sites to naga

Use consistent ordering in apache configuration

Merge remote-tracking branch 'github/pull/571'

Redirect welcome alias to primary site

sotm: Switch to using containers for jekyll sites

Signed-off-by: Grant Slater <github@firefishy.com>

Reduce sensitivity of render rate alarm

podman: use 1500 mtu with slirp4netns for max performance

Deploy welcome.openstreetmap.org on naga

Merge remote-tracking branch 'github/pull/570'

nominatim: add new dependency

Add foundation-welcome to GHA tests

Add docker based welcome.openstreetmap.org

Add support for podman services

Cleanup install of prometheus alertmanager

Record journal contents when a test fails

Create vendor directory before using it

civi version bump

Merge remote-tracking branch 'github/pull/569'

Bump kitchen-dokken from 2.19.0 to 2.19.1

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.19.0 to 2.19.1.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.19.0...v2.19.1)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Enable mod_cgid for gps-tile

Remove gps-tile role from noquiklos

Increase memory limit for refresh-links

dns: update dnscontrol to 3.26.0

foundation: make cookstyle happy

foundation: add pptx to supported extensions

Drop deprecated Expect-CT header

https://github.com/openstreetmap/operations/issues/837

sotm: Remove one-off permission fix

sotm: Do not install Gems as root

Increase memory limit for refresh-links

Merge remote-tracking branch 'github/pull/567'

tile: Grant permissions on spatial_ref_sys

Update expected results for postgres test

Use postgres 15 for test

Add an alert for low render rates on tile servers

systemd: fix typo in template

systemd: add requires and array support for exec_stop

Set wal level to minimal for tile servers

nominatim: default to wal level to minimal

Default wal_level to replica

Revert "wiki: use tmp fork of OsmWikibase"

This reverts commit b014bc9a52b137e1185423818fa2db469807f76f.

community: force bump discourse version

mediawiki: do not backup wiki dumps

Configure prometheus exporter for elasticsearch

foundation: remove cleanup of old wiki skin

osmf: remove broken skin

mediawiki: enable logging output for timer jobs

wiki: use tmp fork of OsmWikibase

mediawiki: enable $wgCacheDirectory to not break wikibase

wiki: Use elasticsearch 7.x

Allow mediawiki mysql users to FLUSH TABLES for backup

Move wiki tabaluga -> konqi

Bring various postgres settings in line with modern defaults