2015-01-27 16:29:44 +00:00
|
|
|
---
|
|
|
|
lvm_size: 20000
|
|
|
|
mem_size: 8192
|
|
|
|
num_cpus: 4
|
|
|
|
# for systems that do not match the above - specify the same parameter in
|
|
|
|
# the host_vars/$hostname file
|
|
|
|
|
2015-05-31 17:17:41 +00:00
|
|
|
custom_rules: [ '-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 80 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 443 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 80 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 443 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 67.219.144.68/32 --dport 443 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 5.175.150.50/32 --dport 443 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 152.19.134.142/32 --dport 443 -j ACCEPT',
|
|
|
|
'-A INPUT -p tcp -m tcp -s 140.211.169.196/32 --dport 443 -j ACCEPT', ]
|
|
|
|
|
|
|
|
custom6_rules: [ '-A INPUT -p tcp -m tcp -s 2610:28:3090:3001:dead:beef:cafe:fed3 --dport 443 -j ACCEPT',
|
2015-08-21 19:41:43 +00:00
|
|
|
'-A INPUT -p tcp -m tcp -s 2604:1580:fe00:0:dead:beef:cafe:fed1 --dport 443 -j ACCEPT',
|
2015-05-31 17:17:41 +00:00
|
|
|
'-A INPUT -p tcp -m tcp -s 2a00:d1a0:1::131 --dport 443 -j ACCEPT', ]
|
|
|
|
|
2015-01-27 16:29:44 +00:00
|
|
|
collectd_apache: true
|
2016-05-17 00:18:04 +00:00
|
|
|
fas_client_groups: sysadmin-web,sysadmin-noc,fi-apprentice,sysadmin-veteran
|
2015-10-16 15:22:03 +00:00
|
|
|
nrpe_procs_warn: 1200
|
|
|
|
nrpe_procs_crit: 1400
|
2015-01-27 16:29:44 +00:00
|
|
|
# By default run 45 wsgi procs
|
2015-10-15 14:03:02 +00:00
|
|
|
mirrorlist_procs: 60
|
2015-01-29 21:33:27 +00:00
|
|
|
|
|
|
|
# Set this to get the vpn postfix setup
|
|
|
|
postfix_group: vpn
|