]> git.openstreetmap.org Git - chef.git/log
chef.git
18 months agowordpress: add 2fa and last-login plugins
Grant Slater [Thu, 15 Jun 2023 15:55:40 +0000 (16:55 +0100)]
wordpress: add 2fa and last-login plugins

18 months agopodman: increase startup timeout to not fail on slow container pulls
Grant Slater [Sun, 25 Jun 2023 11:08:23 +0000 (12:08 +0100)]
podman: increase startup timeout to not fail on slow container pulls

18 months agoMerge remote-tracking branch 'github/pull/593'
Tom Hughes [Sun, 25 Jun 2023 10:55:01 +0000 (11:55 +0100)]
Merge remote-tracking branch 'github/pull/593'

18 months agoSpecify DNS server to use for dokken
Grant Slater [Fri, 23 Jun 2023 13:43:04 +0000 (14:43 +0100)]
Specify DNS server to use for dokken

18 months agonominatim: update taginfo information
Sarah Hoffmann [Wed, 21 Jun 2023 08:09:51 +0000 (10:09 +0200)]
nominatim: update taginfo information

18 months agoFix spamassassin tests for Debian
Tom Hughes [Tue, 20 Jun 2023 20:09:39 +0000 (20:09 +0000)]
Fix spamassassin tests for Debian

18 months agoDrop unnecessary include of chef in osmosis recipe
Tom Hughes [Tue, 20 Jun 2023 19:25:23 +0000 (19:25 +0000)]
Drop unnecessary include of chef in osmosis recipe

18 months agoFix spamassassin service name for Debian 12
Tom Hughes [Tue, 20 Jun 2023 18:19:44 +0000 (18:19 +0000)]
Fix spamassassin service name for Debian 12

18 months agoFix typo
Tom Hughes [Tue, 20 Jun 2023 18:19:01 +0000 (19:19 +0100)]
Fix typo

18 months agoUse ruby 3.1 on Debian
Tom Hughes [Tue, 20 Jun 2023 17:46:56 +0000 (17:46 +0000)]
Use ruby 3.1 on Debian

18 months agoUse PHP 8.2 on Debian
Tom Hughes [Tue, 20 Jun 2023 17:42:11 +0000 (17:42 +0000)]
Use PHP 8.2 on Debian

18 months agoMerge remote-tracking branch 'github/pull/590'
Tom Hughes [Tue, 20 Jun 2023 17:39:51 +0000 (18:39 +0100)]
Merge remote-tracking branch 'github/pull/590'

18 months agohardware: remove haveged as unneeded on kernel 5.15 above
Grant Slater [Tue, 20 Jun 2023 15:36:17 +0000 (16:36 +0100)]
hardware: remove haveged as unneeded on kernel 5.15 above

18 months agoapt: allow brief wait for lock
Grant Slater [Tue, 20 Jun 2023 15:35:35 +0000 (16:35 +0100)]
apt: allow brief wait for lock

18 months agoAdd alerts for uplink status
Tom Hughes [Tue, 20 Jun 2023 11:59:37 +0000 (12:59 +0100)]
Add alerts for uplink status

18 months agosyntax
Guillaume RISCHARD [Sun, 18 Jun 2023 11:46:28 +0000 (07:46 -0400)]
syntax

18 months agoDeleted unused layers
Guillaume RISCHARD [Sun, 18 Jun 2023 11:45:17 +0000 (07:45 -0400)]
Deleted unused layers

18 months agoUse ULA addresses for IPv6
Tom Hughes [Thu, 15 Jun 2023 21:35:56 +0000 (21:35 +0000)]
Use ULA addresses for IPv6

18 months agonetworking: install systemd-resolved when required
Grant Slater [Thu, 15 Jun 2023 15:53:45 +0000 (16:53 +0100)]
networking: install systemd-resolved when required

18 months agoSwitch kitchen debian tests to debian-12
Grant Slater [Thu, 15 Jun 2023 15:52:00 +0000 (16:52 +0100)]
Switch kitchen debian tests to debian-12

18 months agoEnable IPv6 in dokken tests
Grant Slater [Thu, 15 Jun 2023 15:49:42 +0000 (16:49 +0100)]
Enable IPv6 in dokken tests

18 months agoReinstate installation of system prometheus package
Tom Hughes [Wed, 14 Jun 2023 21:30:29 +0000 (22:30 +0100)]
Reinstate installation of system prometheus package

18 months agoDisable node exporter's deprecated ntp collector
Tom Hughes [Wed, 14 Jun 2023 19:23:49 +0000 (20:23 +0100)]
Disable node exporter's deprecated ntp collector

18 months agoRun chrony_exporter for prometheus
Tom Hughes [Wed, 14 Jun 2023 18:11:59 +0000 (19:11 +0100)]
Run chrony_exporter for prometheus

18 months agoFix typo in interface names
Tom Hughes [Wed, 14 Jun 2023 17:14:50 +0000 (18:14 +0100)]
Fix typo in interface names

18 months agoUpdate prometheus, alertmanager and karma to latest versions
Tom Hughes [Tue, 13 Jun 2023 20:15:18 +0000 (21:15 +0100)]
Update prometheus, alertmanager and karma to latest versions

18 months agoDrop promscale support
Tom Hughes [Tue, 13 Jun 2023 19:53:26 +0000 (20:53 +0100)]
Drop promscale support

18 months agoFix threshold for juniper load average alarm
Tom Hughes [Mon, 12 Jun 2023 16:01:58 +0000 (17:01 +0100)]
Fix threshold for juniper load average alarm

18 months agoBase juniper CPU alarm on 5 minute load average
Tom Hughes [Mon, 12 Jun 2023 14:37:19 +0000 (15:37 +0100)]
Base juniper CPU alarm on 5 minute load average

18 months agoUse underlying interfaces for uplink monitoring
Tom Hughes [Sun, 11 Jun 2023 21:29:45 +0000 (22:29 +0100)]
Use underlying interfaces for uplink monitoring

18 months agoAdjust exim mail queue alerting thresholds
Tom Hughes [Sun, 11 Jun 2023 18:30:15 +0000 (19:30 +0100)]
Adjust exim mail queue alerting thresholds

18 months agoFix exim mail queue alerts
Tom Hughes [Sun, 11 Jun 2023 18:27:52 +0000 (19:27 +0100)]
Fix exim mail queue alerts

18 months agoDrop blackhole IPv6 route from Dublin to cogent block in Amsterdam
Tom Hughes [Sun, 11 Jun 2023 08:51:50 +0000 (09:51 +0100)]
Drop blackhole IPv6 route from Dublin to cogent block in Amsterdam

18 months agoDrop cogent addresses from Amsterdam machines
Tom Hughes [Sun, 11 Jun 2023 08:48:45 +0000 (09:48 +0100)]
Drop cogent addresses from Amsterdam machines

18 months agoRemove old cogent addresses from various ACLs
Tom Hughes [Sat, 10 Jun 2023 15:56:00 +0000 (16:56 +0100)]
Remove old cogent addresses from various ACLs

18 months agoUse he.net address to query metrics from Amsterdam switch
Tom Hughes [Sat, 10 Jun 2023 10:06:27 +0000 (11:06 +0100)]
Use he.net address to query metrics from Amsterdam switch

18 months agoplanet: increase rate limit to 16MB/s
Grant Slater [Fri, 9 Jun 2023 19:12:27 +0000 (20:12 +0100)]
planet: increase rate limit to 16MB/s

18 months agoMove norbert's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 18:00:04 +0000 (19:00 +0100)]
Move norbert's default route to he.net link

18 months agoCorrect he.net address for norbert
Tom Hughes [Fri, 9 Jun 2023 17:09:06 +0000 (18:09 +0100)]
Correct he.net address for norbert

18 months agoMove spike-{06,07,08}'s default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:59:17 +0000 (17:59 +0100)]
Move spike-{06,07,08}'s default route to he.net link

18 months agoMove dribble and ironbelly's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:47:59 +0000 (17:47 +0100)]
Move dribble and ironbelly's default route to he.net link

18 months agoMove dulcy and vhagar's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:27:53 +0000 (17:27 +0100)]
Move dulcy and vhagar's default route to he.net link

18 months agoMove odin's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 16:07:10 +0000 (17:07 +0100)]
Move odin's default route to he.net link

18 months agoMove faffy's default route to he.net link
Tom Hughes [Fri, 9 Jun 2023 13:53:43 +0000 (14:53 +0100)]
Move faffy's default route to he.net link

18 months agowordpress: Set 128M memory limit as required by WPML
Grant Slater [Mon, 5 Jun 2023 06:36:36 +0000 (09:36 +0300)]
wordpress: Set 128M memory limit as required by WPML

Signed-off-by: Grant Slater <github@firefishy.com>
18 months agocivi version bump
Guillaume RISCHARD [Sat, 3 Jun 2023 09:14:34 +0000 (05:14 -0400)]
civi version bump

19 months agodns: Upgrade dnscontrol to 4.1.0
Grant Slater [Wed, 31 May 2023 15:04:32 +0000 (18:04 +0300)]
dns: Upgrade dnscontrol to 4.1.0

19 months agoDrop the apache low request rate alert as it's not reliable
Tom Hughes [Thu, 25 May 2023 18:05:23 +0000 (19:05 +0100)]
Drop the apache low request rate alert as it's not reliable

19 months agoAdd ae60 to uplink interfaces in Dublin
Tom Hughes [Thu, 25 May 2023 14:14:33 +0000 (15:14 +0100)]
Add ae60 to uplink interfaces in Dublin

19 months agoAdd ae60 to uplink interfaces in Amsterdam
Tom Hughes [Thu, 25 May 2023 13:10:34 +0000 (14:10 +0100)]
Add ae60 to uplink interfaces in Amsterdam

19 months agoImagery: add OS Local 2023 April per request
Grant Slater [Thu, 25 May 2023 10:57:07 +0000 (13:57 +0300)]
Imagery: add OS Local 2023 April per request

19 months agoAdd he.net addresses to remaining Amsterdam machines
Tom Hughes [Wed, 24 May 2023 14:47:45 +0000 (15:47 +0100)]
Add he.net addresses to remaining Amsterdam machines

19 months agoUse source routing to pick the correct external network on faffy
Tom Hughes [Wed, 24 May 2023 08:20:53 +0000 (09:20 +0100)]
Use source routing to pick the correct external network on faffy

19 months agoAdd he.net address to faffy
Tom Hughes [Wed, 24 May 2023 08:02:04 +0000 (09:02 +0100)]
Add he.net address to faffy

19 months agoAllow network interfaces to override role attributes
Tom Hughes [Wed, 24 May 2023 07:25:53 +0000 (07:25 +0000)]
Allow network interfaces to override role attributes

19 months agoPush external network config in Amsterdam down to the hosts
Tom Hughes [Tue, 23 May 2023 21:27:36 +0000 (22:27 +0100)]
Push external network config in Amsterdam down to the hosts

19 months agoAdd new Amsterdam addresses to whitelists
Tom Hughes [Tue, 23 May 2023 20:11:51 +0000 (21:11 +0100)]
Add new Amsterdam addresses to whitelists

19 months agodns: bump dnscontrol to 4.0.1
Grant Slater [Fri, 19 May 2023 20:58:18 +0000 (23:58 +0300)]
dns: bump dnscontrol to 4.0.1

19 months agoUpdate site power limit for Amsterdam to 3.5kVA
Tom Hughes [Thu, 18 May 2023 18:44:38 +0000 (19:44 +0100)]
Update site power limit for Amsterdam to 3.5kVA

19 months agoReduce sensitivity of job processing rate alert
Tom Hughes [Wed, 17 May 2023 19:41:52 +0000 (20:41 +0100)]
Reduce sensitivity of job processing rate alert

19 months agoIncrease alert threshold for interface transmit/receive alerts
Tom Hughes [Wed, 17 May 2023 19:31:04 +0000 (20:31 +0100)]
Increase alert threshold for interface transmit/receive alerts

19 months agoReduce sensitivity of postgres idle transaction alert
Tom Hughes [Wed, 17 May 2023 19:28:09 +0000 (20:28 +0100)]
Reduce sensitivity of postgres idle transaction alert

19 months agodns: update dnscontrol to 3.31.4
Grant Slater [Fri, 12 May 2023 15:41:35 +0000 (16:41 +0100)]
dns: update dnscontrol to 3.31.4

19 months agoblog: explicitly track master branch
Grant Slater [Tue, 9 May 2023 14:09:59 +0000 (15:09 +0100)]
blog: explicitly track master branch

19 months agodmca: Deny access to .git directory
Grant Slater [Tue, 9 May 2023 13:25:29 +0000 (14:25 +0100)]
dmca: Deny access to .git directory

19 months agoMerge pull request #589 from pnorman/tilelog_v1.5.0
Tom Hughes [Mon, 8 May 2023 06:51:43 +0000 (07:51 +0100)]
Merge pull request #589 from pnorman/tilelog_v1.5.0

Update to tilelog v1.5.0

19 months agoUpdate to tilelog v1.5.0
Paul Norman [Mon, 8 May 2023 06:47:39 +0000 (23:47 -0700)]
Update to tilelog v1.5.0

19 months agoUpdate taginfo databases atomically
Tom Hughes [Sat, 6 May 2023 15:56:20 +0000 (16:56 +0100)]
Update taginfo databases atomically

Closes #588

19 months agoAvoid alerting on transient taginfo size changes during updates
Tom Hughes [Sat, 6 May 2023 11:02:41 +0000 (12:02 +0100)]
Avoid alerting on transient taginfo size changes during updates

19 months agoUpdate wal-g to 2.0.1
Tom Hughes [Thu, 4 May 2023 18:43:12 +0000 (19:43 +0100)]
Update wal-g to 2.0.1

19 months agoDrop wal-e support
Tom Hughes [Thu, 4 May 2023 18:42:01 +0000 (19:42 +0100)]
Drop wal-e support

19 months agodns: Update dnscontrol to 3.31.3
Grant Slater [Wed, 3 May 2023 10:36:06 +0000 (11:36 +0100)]
dns: Update dnscontrol to 3.31.3

19 months agoAdd an alert for postgresql transactions which have been idle too long
Tom Hughes [Wed, 3 May 2023 07:31:29 +0000 (08:31 +0100)]
Add an alert for postgresql transactions which have been idle too long

19 months agoAdd metric for idle postgres processes
Tom Hughes [Tue, 2 May 2023 23:10:44 +0000 (00:10 +0100)]
Add metric for idle postgres processes

19 months agoAdd postgres metric for active WAL segments
Tom Hughes [Tue, 2 May 2023 20:43:34 +0000 (21:43 +0100)]
Add postgres metric for active WAL segments

19 months agoUpdate matomo to 4.14.2
Tom Hughes [Tue, 2 May 2023 17:59:15 +0000 (18:59 +0100)]
Update matomo to 4.14.2

19 months agoUpdate chef client to 18.2.7
Tom Hughes [Tue, 2 May 2023 17:57:59 +0000 (18:57 +0100)]
Update chef client to 18.2.7

19 months agowordpress: block xmlrpc.php access for the moment
Grant Slater [Mon, 1 May 2023 19:21:49 +0000 (20:21 +0100)]
wordpress: block xmlrpc.php access for the moment

20 months agoDrop role for tabaluga
Tom Hughes [Wed, 26 Apr 2023 13:30:34 +0000 (14:30 +0100)]
Drop role for tabaluga

20 months agoProxy websocket requests for prometheus
Tom Hughes [Mon, 24 Apr 2023 08:46:20 +0000 (08:46 +0000)]
Proxy websocket requests for prometheus

20 months agoAdd some alerts for taginfo
Tom Hughes [Sun, 23 Apr 2023 15:13:58 +0000 (16:13 +0100)]
Add some alerts for taginfo

20 months agoCollect taginfo metrics
Tom Hughes [Sun, 23 Apr 2023 13:14:18 +0000 (14:14 +0100)]
Collect taginfo metrics

20 months agobackup: add awscli
Grant Slater [Wed, 19 Apr 2023 10:15:59 +0000 (11:15 +0100)]
backup: add awscli

20 months agocommunity: dump discourse to v3.0.3
Grant Slater [Wed, 19 Apr 2023 10:14:30 +0000 (11:14 +0100)]
community: dump discourse to v3.0.3

20 months agodns: upgrade dnscontrol to 3.31.1
Grant Slater [Wed, 19 Apr 2023 10:14:11 +0000 (11:14 +0100)]
dns: upgrade dnscontrol to 3.31.1

20 months agoRestrict guzzlehttp/psr7 to versions before 2.5.0 for mediawiki
Tom Hughes [Mon, 17 Apr 2023 19:22:01 +0000 (20:22 +0100)]
Restrict guzzlehttp/psr7 to versions before 2.5.0 for mediawiki

20 months agoMerge remote-tracking branch 'github/pull/587'
Tom Hughes [Sun, 16 Apr 2023 09:26:12 +0000 (10:26 +0100)]
Merge remote-tracking branch 'github/pull/587'

20 months agoEnable experimental wikidata source
Jochen Topf [Sat, 15 Apr 2023 20:10:11 +0000 (22:10 +0200)]
Enable experimental wikidata source

20 months agoConfigure database directory for geoipupdate explicitly
Tom Hughes [Fri, 14 Apr 2023 16:56:14 +0000 (17:56 +0100)]
Configure database directory for geoipupdate explicitly

20 months agocommunity: enable IPv6 template again
Grant Slater [Fri, 14 Apr 2023 05:02:08 +0000 (06:02 +0100)]
community: enable IPv6 template again

20 months agocommunity: Enable ssl stapling and set a ssl_dhparam
Grant Slater [Fri, 14 Apr 2023 04:41:20 +0000 (05:41 +0100)]
community: Enable ssl stapling and set a ssl_dhparam

20 months agocommunity: Temporarily use discourse-translator fork and add discourse-saved-searches
Grant Slater [Wed, 12 Apr 2023 17:25:38 +0000 (18:25 +0100)]
community: Temporarily use discourse-translator fork and add discourse-saved-searches

* Use a fork of discourse-translator to support sr-Latn see: https://github.com/discourse/discourse-translator/pull/103
* Added discourse-saved-searches

20 months agoApply memory limits to apache servers to avoid memory exhaustion
Tom Hughes [Wed, 12 Apr 2023 17:07:34 +0000 (18:07 +0100)]
Apply memory limits to apache servers to avoid memory exhaustion

20 months agoStop running hwraid status daemons
Tom Hughes [Wed, 12 Apr 2023 16:45:17 +0000 (17:45 +0100)]
Stop running hwraid status daemons

20 months agoSort supybot capabilities in it's prefered order
Tom Hughes [Mon, 10 Apr 2023 18:20:14 +0000 (19:20 +0100)]
Sort supybot capabilities in it's prefered order

20 months agoMove supybot from ironbelly to idris
Tom Hughes [Mon, 10 Apr 2023 18:07:57 +0000 (19:07 +0100)]
Move supybot from ironbelly to idris

20 months agoBase site power alerts on a one hour rolling average
Tom Hughes [Mon, 10 Apr 2023 15:04:05 +0000 (16:04 +0100)]
Base site power alerts on a one hour rolling average

20 months agoAutomate configuration of prometheus allow list for discourse
Tom Hughes [Mon, 10 Apr 2023 15:00:21 +0000 (16:00 +0100)]
Automate configuration of prometheus allow list for discourse

20 months agoRemove site current alerts and update pdu current alerts
Tom Hughes [Mon, 10 Apr 2023 14:45:29 +0000 (15:45 +0100)]
Remove site current alerts and update pdu current alerts

20 months agoIncrease alert window for site power usage alert
Grant Slater [Fri, 7 Apr 2023 00:16:22 +0000 (01:16 +0100)]
Increase alert window for site power usage alert