{
    "name": "dev_neo4j_debian_13_cluster",
    "description": "role applied to dev neo4j debian 13 cluster hosts",
    "run_list": [
      "role[qa_base_linux]",
      "recipe[irrigate-neo4j::default]",
      "recipe[irrigate-neo4j::user_backup]",
      "recipe[irrigate-neo4j::restart_user]",
      "recipe[irrigate-neo4j::support_user]",
      "recipe[irrigate-neo4j::reboot]",
      "recipe[irrigate-datadog::neo4j]",
      "recipe[irrigate-orchard_base::cinc-client]"
    ],
    "override_attributes": {
      "sshd": {
        "sshd_config": {
          "ClientAliveCountMax": "120",
          "ClientAliveInterval": "60",
          "AcceptEnv": "LANG LANGUAGE LC_* XMODIFIERS NEO4J_* LOGGER_* ENVIRONMENT"
        }
      }
    },
    "default_attributes": {
      "firewall": {
        "firewalld": {
          "permanent": true
        }
      },
      "datadog": {
        "journald": {
          "units": {
            "neo4j": true
          }
        },
        "neo4j_credentials_data_bag_name": "dev_neo4j_datadog_credentials",
        "neo4j": {
          "cluster_name": "dev-neo4j-5-cluster",
          "version": "5.26.21",
          "wheel": {
            "version": "3.0.4",
            "source": "https://packagecloud.io/orchardit/neo4j/packages/python/datadog_neo4j-3.0.4-py3-none-any.whl/download"
          },
          "logs": [
            {
              "type": "file",
              "path": "/var/log/neo4j/query.log",
              "source": "neo4j",
              "sourcecategory": "query",
              "service": "neo4j",
              "log_processing_rules": [
                {
                  "type": "exclude_at_match",
                  "name": "exclude-getRoutingTable",
                  "pattern": "CALL\\sdbms.routing.getRoutingTable"
                },
                {
                  "type": "exclude_at_match",
                  "name": "exclude-queryJmx",
                  "pattern": "CALL\\sdbms.queryJmx"
                },
                {
                  "type": "exclude_at_match",
                  "name": "exclude-ping",
                  "pattern": "CALL\\sdb.ping"
                },
                {
                  "type": "exclude_at_match",
                  "name": "exclude-licenseAgreementDetails",
                  "pattern": "CALL\\sdbms.licenseAgreementDetails"
                },
                {
                  "type": "exclude_at_match",
                  "name": "exclude-showCurrentUser",
                  "pattern": "CALL\\sdbms.showCurrentUser"
                },
                {
                  "type": "exclude_at_match",
                  "name": "exclude-connection-polling",
                  "pattern": "return\\s1"
                }
              ]
            }
          ]
        },
        "tags": {
          "environment": "dev",
          "service_name": "neo4j",
          "neo4j_cluster": "dev-neo4j-5-cluster"
        }
      },
      "neo4j": {
        "apoc": {
          "install_url": "https://github.com/neo4j/apoc/releases/download/5.26.21/apoc-5.26.21-core.jar",
          "checksum": "a097e5dd303641b40b9cbce64dc1065c540ee355c1496e413dea852272c34490"
        },
        "version": "5.26.21",
        "data_volume_type": "local",
        "config": {
          "db.logs.query.enabled": "INFO",
          "db.logs.query.threshold": "1ms",
          "db.logs.query.transaction.enabled": "OFF",
          "dbms.netty.ssl.provider": "OPENSSL",
          "dbms.connectors.default_advertised_address_prefix": "dev-neo4j-5-cluster",
          "server.memory.heap.initial_size": "8G",
          "server.memory.heap.max_size": "8G",
          "server.memory.pagecache.size": "12000000000",
          "dbms.routing.enabled": "true",
          "causal_clustering.ssl_policy": "cluster",
          "causal_clustering.causal_clustering.discovery_address": "dev-neo4j-5-cluster-discovery.dev.theorchard.io",
          "ssl_policy": {
            "policies": {
              "backup": {
                "base_directory": "/etc/neo4j/default",
                "allow_key_generation": "false",
                "data_bag_name": "dev_neo4j_certificate.pem",
                "trust_all": "false",
                "client_auth": "NONE",
                "verify_hostname": "false",
                "tls_versions": "TLSv1.2",
                "ciphers": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
              },
              "bolt": {
                "base_directory": "/etc/neo4j/default",
                "allow_key_generation": "false",
                "data_bag_name": "dev_neo4j_certificate.pem",
                "trust_all": "false",
                "client_auth": "NONE",
                "verify_hostname": "false",
                "tls_versions": "TLSv1.2",
                "ciphers": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
              },
              "cluster": {
                "base_directory": "/etc/neo4j/cluster_policy",
                "allow_key_generation": "false",
                "data_bag_name": "dev_neo4j_certificate.pem",
                "trust_all": "false",
                "client_auth": "REQUIRE",
                "verify_hostname": "false",
                "tls_versions": "TLSv1.2",
                "ciphers": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
              }
            }
          },
          "kafka.zookeeper.connect": "z-1.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:2182,z-3.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:2182,z-2.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:2182",
          "kafka.bootstrap.servers": "b-1.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:9094,b-2.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:9094,b-3.dev-managed-kafka-cdc.rk4es0.c11.kafka.us-east-1.amazonaws.com:9094",
          "kafka.security.protocol": "SSL",
          "kafka.ssl.truststore.location": "/etc/ssl/certs/java/cacerts",
          "dbms.security.procedures.allowlist": "apoc.*,cdc.*",
          "dbms.security.procedures.unrestricted": "apoc.*,cdc.*",
          "apoc.export.file.enabled": "true",
          "apoc.trigger.enabled": "true",
          "apoc.uuid.enabled": "true"
        },
        "users": {
          "s3_bucket_name": "dev-orchdbucket"
        },
        "route53": {
          "domain_name": "dev.theorchard.io",
          "zone_id": "Z21XEY26C989RH",
          "networking_account_enabled": false,
          "aws_role_arn": "arn:aws:iam::734458723522:role/cross-account-dev-neo4j-dns-update"
        }
      },
      "splunk": {
        "packagecloud_token_data_bag_name": "dev_splunk_packagecloud_token",
        "vpc_endpoint_dns": "vpce-04b08f43877922e13-bzdbpgff.vpce-svc-0172c4b1d11bfe606.us-east-1.vpce.amazonaws.com",
        "function": "neo4j"
      },
      "unattended_upgrades": {
        "unattended_upgrade": 7,
        "package_blacklist": [
          "neo4j-enterprise",
          "cypher-shell"
        ]
      }
    }
  }