ansible/inventory/host_vars/db-fas01.stg.iad2.fedoraproject.org

---
#
# Only allow postgresql access from the frontend node and ipsilon01.stg and
# fas3-01.stg and openshift
#
custom_rules:
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.129 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.137 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.82 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.104 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.105 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.106 --dport 5432 -j ACCEPT'
  # - '-A INPUT -p tcp -m tcp -s 10.5.128.107 --dport 5432 -j ACCEPT'
  # TODO: lock it down more
  - '-A INPUT -p tcp -m tcp -s 10.3.166.0/24 --dport 5432 -j ACCEPT'
# This is a generic list, monitored by collectd
databases:
  - fas2
datacenter: iad2
db_backup_dir: ['/backups']
# This is a more strict list, to be made publicly available
dbs_to_backup:
  - fas2
effective_cache_size: "3GB"
eth0_ipv4_gw: 10.3.166.254
eth0_ipv4_ip: 10.3.166.34
ks_repo: http://10.3.163.35/repo/rhel/RHEL8-x86_64/
ks_url: http://10.3.163.35/repo/rhel/ks/kvm-rhel-8-iad2
# These are normally group variables, but in this case db servers are often different
lvm_size: 30000
mem_size: 4096
nrpe_procs_crit: 500
#
# Large updates pushes cause lots of db threads doing the tag moves, so up this from default.
#
nrpe_procs_warn: 400
num_cpus: 2
shared_buffers: "1GB"
vmhost: vmhost-x86-02.stg.iad2.fedoraproject.org
volgroup: /dev/vg_guests