cluster: appserver

admin::groups:

- deployment

- perf-roots

nutcracker::verbosity: "4"

profile::mediawiki::php::enable_fpm: true

# Bump the connections per backend to 5 in mcrouter, see T203786

profile::mediawiki::mcrouter_wancache::num_proxies: 5

# Use the gutter pool for failover

profile::mediawiki::mcrouter_wancache::gutter_ttl: 600

profile::mediawiki::mcrouter_wancache::use_onhost_memcache: false

has_lvs: true

# TLS configuration: go via Envoy

profile::mediawiki::webserver::has_tls: true

profile::envoy::ensure: present

profile::tlsproxy::envoy::sni_support: "no" # you need the double quotes, because yaml.

profile::tlsproxy::envoy::tls_port: 443

profile::tlsproxy::envoy::services:

- server_names: ["*"]

port: 80

profile::tlsproxy::envoy::upstream_response_timeout: 203.0

profile::tlsproxy::envoy::retries: false

profile::tlsproxy::envoy::global_cert_name: "appservers.svc.eqiad.wmnet"

profile::tlsproxy::envoy::access_log: true

profile::tlsproxy::envoy::capitalize_headers: true

profile::mediawiki::httpd::logrotate_retention: 12

profile::lvs::realserver::pools:

apaches:

services:

- php7.2-fpm

- apache2

- mcrouter

- nutcracker

- envoyproxy

appservers-https:

services:

- php7.2-fpm

- apache2

- mcrouter

- nutcracker

- envoyproxy

profile::mediawiki::php::php_version: "7.2"

# bail out in case a long-lasting C function is called and

# excimer can't throw its exception

profile::mediawiki::php::request_timeout: 201

profile::mediawiki::php::fpm_workers_multiplier: 2.0

profile::mediawiki::apc_shm_size: 6096M

profile::mediawiki::php::fpm_config:

opcache.interned_strings_buffer: 96

opcache.memory_consumption: 1024

max_execution_time: 210 # we don't really want max_execution_time to kick in ever, see T248564

# Configure php-fpm restarts

profile::mediawiki::php::restarts::ensure: present

# We set the restart watermark at 200 MB, which is approximately how much

# opcache one full day of deployments consume.

profile::mediawiki::php::restarts::opcache_limit: 200