Merge remote-tracking branch 'github/pull/561'

Install grafana keyring manually

Upgrade foundation, DWG and MWG wikis to 1.39

Update board wiki to 1.39

Try to make mediawiki installation and update more robust

Add tests for foundation cookbook

Revert "Update board wiki to 1.39"

This reverts commit 95d18fd8425340bd56582d403bdb88e7caeaeaec.

Update board wiki to 1.39

replace MultiMaps extension with Kartographer extension, closes openstreetmap/operations#749

Update to osm-carto v5.7.0

Remove references to eustace

Remove role for eustace

community: bump discourse_docker release

community: upgrade to v2.8.14

Update chef client to 18.1.0

nominiatim: add new sqlalchemy dependency

Make eddie a database master

Add postgres 15 to eddie

nominatim: remove vacuuming of sub search-name tables

They don't have an index on integer arrays anymore.

community: fix lint issue

community: add short alias to certs

Remove nominatim role from pummelzacken

Fix typo

Alert if the number of SNMP PDUs returned decreases

Add some mysql alerts

Increase memcache size for gps-tile servers

Create directories for gps-tile output

Configure muirdris as a gps-tile server

Tune mysql for matomo on smaug

community: pin docker builder code release

Tune mysql for matomo on smaug

Tune mysql for matomo on smaug

Tune mysql for matomo on smaug

Remove matomo role from eustace

Enable proxy_fcgi for matomo

dhcpd: use netboot.xyz-undionly.kpxe for PXE boot.

Use netboot.xyz-undionly.kpxe as it appears more reliable with our
HP / HPE servers for netboot.

Configure smaug as a matomo server

community: attempt to pin discourse-prometheus plugin release

community: pin version to "stable"

configure nominatim on vhagar

Make changeet replication report backtrace on error

Fix rubocop warnings

nominatim: enable luajit

Add nominatim role to vhagar

Add dribble and vhagar OOB cards to DHCP

Update reverse DNS for AMS internal network

Add roles for dribble and vhagar

Merge remote-tracking branch 'github/pull/559'

Merge remote-tracking branch 'github/pull/558'

Bump serverspec from 2.42.0 to 2.42.1

Bumps [serverspec](http://serverspec.org/) from 2.42.0 to 2.42.1.

---
updated-dependencies:
- dependency-name: serverspec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump kitchen-dokken from 2.18.0 to 2.19.0

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.18.0 to 2.19.0.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.18.0...v2.19.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

supybot: update osmf-server-info urls

Merge remote-tracking branch 'github/pull/557'

Bump kitchen-dokken from 2.17.4 to 2.18.0

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.17.4 to 2.18.0.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.17.4...v2.18.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Don't apply HP disk rules to disks not on HP controllers

Don't set smart_device for cciss disks which aren't in the PD list

Make disk configuration more robust

Add roles for smaug and muirdris

Add DHCP for smaug and muirdris OOB cards

Update internal reverse DNS to Dublin

mediawiki: Actually allow AF_UNIX.

mediawiki: Addition ease systemd restrictions.

mediawiki: ease systemd restrictions. AF_UNIX used to connect to mysql

docker: install docker-compose-plugin

community: use notify_group to DRY rebuild logic

community: container definitions should not be world readable

Update prometheus and karma

Merge remote-tracking branch 'github/pull/555'

Bump kitchen-dokken from 2.17.3 to 2.17.4

Bumps [kitchen-dokken](https://github.com/someara/kitchen-dokken) from 2.17.3 to 2.17.4.
- [Release notes](https://github.com/someara/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/someara/kitchen-dokken/compare/v2.17.3...v2.17.4)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Use upstream default location for passenger instance registry

community: pin postgres v13

Merge remote-tracking branch 'github/pull/554'

Bump test-kitchen from 3.4.0 to 3.5.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.4.0...v3.5.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

use canonical URL for nominatim.org

nominatim: do not try to update wikipedia importances

They never change upstream, so no need to stress the server.

Adjust environment temperature alarm thresholds

Enable remote read for promscale

community: Disable ratelimiting a test

Manage postgresql for osqa

osqa: disable unused mysqlfulltext module

Merge remote-tracking branch 'github/pull/550'

letencrypt: Use default certificate chain

Only alert for readonly filesystems which were recently writable

Add some comments to tile config

Merge remote-tracking branch 'github/pull/528'

community: fix cookstyle

discourse: Add serverspec docker images tests

Make OTRS use fafnir to send mail

Adjust environment alarm thresholds

Lock mail gem to version 2.7.1

Propagate cookie timeouts to matomo configuration

Update matomo to 4.13.0

Let letsencrypt renewal write cookie files

Make smart collector default to auto instead of sat

Allow CAP_DAC_OVERRIDE for the smart collector

Add --phpfpm.fix-process-count to phpfpm exporter

Run phpfpm exporter in group www-data to allow socket access

Remove traces of urmel

Remove role for urmel

Remove munin role from urmel