2014-09-09 12:48:09 +02:00
|
|
|
---
|
|
|
|
# Define resources for this group of hosts here.
|
|
|
|
lvm_size: 20000
|
|
|
|
mem_size: 2048
|
|
|
|
num_cpus: 2
|
|
|
|
|
|
|
|
# for systems that do not match the above - specify the same parameter in
|
|
|
|
# the host_vars/$hostname file
|
|
|
|
|
2014-10-03 14:25:12 +00:00
|
|
|
# 9940 is for the anitya public relay
|
|
|
|
tcp_ports: [ 80, 443, 9940 ]
|
2014-09-09 12:48:09 +02:00
|
|
|
|
2014-10-03 16:30:05 +00:00
|
|
|
custom_rules: [
|
|
|
|
# Need for rsync from log01 for logs.
|
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
|
|
|
|
# Need so that anitya-backend can talk fedmsg to our relay
|
2014-10-03 16:32:50 +00:00
|
|
|
'-A INPUT -p tcp -m tcp -s 140.211.169.230 --dport 9941 -j ACCEPT',
|
2014-10-03 16:30:05 +00:00
|
|
|
]
|
2014-09-09 12:48:09 +02:00
|
|
|
|
|
|
|
fas_client_groups: sysadmin-noc,sysadmin-web
|
|
|
|
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
|
|
fedmsg_certs:
|
|
|
|
- service: shell
|
|
|
|
owner: root
|
|
|
|
group: sysadmin
|
|
|
|
- service: anitya
|
|
|
|
owner: root
|
|
|
|
group: apache
|