2013-06-07 20:01:23 +00:00
|
|
|
config = dict(
|
|
|
|
|
sign_messages=True,
|
|
|
|
|
validate_signatures=True,
|
|
|
|
|
ssldir="/etc/pki/fedmsg",
|
|
|
|
|
|
2014-05-27 19:31:01 +00:00
|
|
|
{% if env == 'staging' %}
|
2015-01-13 20:51:35 +00:00
|
|
|
crl_location="https://stg.fedoraproject.org/fedmsg/crl.pem",
|
2014-05-27 19:31:01 +00:00
|
|
|
{% else %}
|
2013-06-07 20:01:23 +00:00
|
|
|
crl_location="https://fedoraproject.org/fedmsg/crl.pem",
|
2014-05-27 19:31:01 +00:00
|
|
|
{% endif %}
|
2013-06-07 20:01:23 +00:00
|
|
|
crl_cache="/var/run/fedmsg/crl.pem",
|
|
|
|
|
crl_cache_expiry=86400, # Daily
|
|
|
|
|
|
2015-06-17 15:59:58 +00:00
|
|
|
certnames=dict([
|
|
|
|
|
# This is the set of certs for this host, dynamically generated from the
|
|
|
|
|
# ``fedmsg_certs`` host vars
|
|
|
|
|
{% for cert in fedmsg_certs %}
|
2015-07-06 14:53:44 +00:00
|
|
|
("{{cert.get('alias', cert['service'])}}.{{inventory_hostname_short}}", "{{cert['service']}}-{{fedmsg_fqdn | default(ansible_fqdn)}}"),
|
2015-06-17 15:59:58 +00:00
|
|
|
{% endfor %}
|
2015-07-06 14:53:44 +00:00
|
|
|
] + [
|
2015-06-17 15:59:58 +00:00
|
|
|
# This is the beginning of the static list. We should eventually remove
|
|
|
|
|
# this.
|
2015-06-30 16:13:03 +00:00
|
|
|
("git.hosted03", "git-hosted03.vpn.fedoraproject.org"),
|
|
|
|
|
("git.hosted04", "git-hosted04.vpn.fedoraproject.org"),
|
|
|
|
|
("trac.hosted03", "trac-hosted03.vpn.fedoraproject.org"),
|
|
|
|
|
("trac.hosted04", "trac-hosted04.vpn.fedoraproject.org"),
|
|
|
|
|
("shell.hosted03", "shell-hosted03.vpn.fedoraproject.org"),
|
|
|
|
|
("shell.hosted04", "shell-hosted04.vpn.fedoraproject.org"),
|
2013-06-07 20:01:23 +00:00
|
|
|
] + [
|
2015-06-12 23:10:42 +00:00
|
|
|
("shell.anitya-frontend01", "shell-anitya-frontend01.vpn.fedoraproject.org"),
|
|
|
|
|
("anitya.anitya-frontend01", "anitya-anitya-frontend01.vpn.fedoraproject.org"),
|
|
|
|
|
("shell.anitya-backend01", "shell-anitya-backend01.vpn.fedoraproject.org"),
|
|
|
|
|
("anitya.anitya-backend01", "anitya-anitya-backend01.vpn.fedoraproject.org"),
|
2014-09-10 16:38:42 +00:00
|
|
|
|
2015-04-28 12:43:59 +00:00
|
|
|
# FAF/retrace is on the qa network and talks to an inbound relay.
|
|
|
|
|
("shell.retrace01", "shell-retrace01.qa.fedoraproject.org"),
|
|
|
|
|
("shell.retrace02", "shell-retrace02.qa.fedoraproject.org"),
|
|
|
|
|
("faf.retrace01", "faf-retrace01.qa.fedoraproject.org"),
|
|
|
|
|
("faf.retrace02", "faf-retrace02.qa.fedoraproject.org"),
|
|
|
|
|
|
2013-11-08 14:58:28 +00:00
|
|
|
# This is for the copr backend, which is a little different. The
|
|
|
|
|
# "cert-prefix" is just "copr", and is hardcoded in
|
|
|
|
|
# backend/dispatcher.py. The hostname is also a little different,
|
|
|
|
|
# since it is an openstack node. This might be a little fragile. :/
|
2013-11-08 18:59:52 +00:00
|
|
|
# See https://github.com/fedora-infra/fedmsg/issues/199 for the plan.
|
2014-06-25 20:03:36 +00:00
|
|
|
("copr.dhcp-client03", "copr-copr-be.cloud.fedoraproject.org"),
|
2013-11-08 14:58:28 +00:00
|
|
|
("copr.copr-be-i-00000407", "copr-copr-be.cloud.fedoraproject.org"),
|
2014-01-29 21:16:33 +00:00
|
|
|
("copr.copr-be", "copr-copr-be.cloud.fedoraproject.org"),
|
2014-07-10 18:41:14 +00:00
|
|
|
|
|
|
|
|
# Jenkins, also being a cloud node, is weird. Like copr.
|
2015-08-26 16:38:54 +00:00
|
|
|
("shell.jenkins-master-unknown", "shell-jenkins.fedorainfracloud.org"),
|
|
|
|
|
("jenkins.jenkins-master-unknown", "jenkins-jenkins.fedorainfracloud.org"),
|
2013-06-07 20:01:23 +00:00
|
|
|
]),
|
|
|
|
|
)
|
|
|
|
|
|
