2014-06-09 21:58:12 +00:00
|
|
|
---
|
|
|
|
|
# Define resources for this group of hosts here.
|
|
|
|
|
lvm_size: 30000
|
2014-06-10 19:01:12 +00:00
|
|
|
mem_size: 6144
|
2014-06-09 21:58:12 +00:00
|
|
|
num_cpus: 2
|
|
|
|
|
|
|
|
|
|
# for systems that do not match the above - specify the same parameter in
|
|
|
|
|
# the host_vars/$hostname file
|
|
|
|
|
|
2015-11-22 02:30:55 +00:00
|
|
|
tcp_ports: [ 80, 443,
|
2014-06-09 21:58:12 +00:00
|
|
|
# These 16 ports are used by fedmsg. One for each wsgi thread.
|
|
|
|
|
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
|
|
|
|
|
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
|
|
|
|
|
|
2015-11-22 02:30:55 +00:00
|
|
|
custom_rules: [
|
|
|
|
|
# Needed for rsync from log01 for logs.
|
|
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT',
|
|
|
|
|
'-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
|
|
|
|
|
# Needed to let nagios on noc01 and noc02 pipe alerts to zodbot here
|
|
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.41 --dport 5050 -j ACCEPT',
|
|
|
|
|
'-A INPUT -p tcp -m tcp -s 152.19.134.192 --dport 5050 -j ACCEPT',
|
2015-11-22 02:35:34 +00:00
|
|
|
# batcave01 also needs access to announce commits.
|
2015-11-22 02:38:55 +00:00
|
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.23 --dport 5050 -j ACCEPT',
|
2015-11-22 02:30:55 +00:00
|
|
|
]
|
2014-06-09 21:58:12 +00:00
|
|
|
|
2015-06-12 19:57:23 +00:00
|
|
|
fas_client_groups: sysadmin-noc,fi-apprentice,sysadmin-web,sysadmin-mote
|
2014-06-09 21:58:12 +00:00
|
|
|
|
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
|
|
|
fedmsg_certs:
|
|
|
|
|
- service: shell
|
|
|
|
|
owner: root
|
|
|
|
|
group: sysadmin
|
|
|
|
|
- service: supybot
|
|
|
|
|
owner: root
|
|
|
|
|
group: daemon
|
2015-06-12 19:31:37 +00:00
|
|
|
can_send:
|
|
|
|
|
# cookies!
|
|
|
|
|
- irc.karma
|
|
|
|
|
# standard meetbot stuff
|
|
|
|
|
- meetbot.meeting.complete
|
|
|
|
|
- meetbot.meeting.start
|
|
|
|
|
- meetbot.meeting.topic.update
|
|
|
|
|
# meetbot line items
|
|
|
|
|
- meeting.item.agreed
|
|
|
|
|
- meeting.item.accepted
|
|
|
|
|
- meeting.item.rejected
|
|
|
|
|
- meeting.item.action
|
|
|
|
|
- meeting.item.info
|
|
|
|
|
- meeting.item.idea
|
|
|
|
|
- meeting.item.help
|
|
|
|
|
- meeting.item.link
|
2015-10-12 02:01:24 +00:00
|
|
|
|
|
|
|
|
# For the MOTD
|
|
|
|
|
csi_security_category: Moderate
|
|
|
|
|
csi_primary_contact: mote admins - sysadmin-mote-members@fedoraproject.org
|
2015-11-06 17:52:38 +00:00
|
|
|
csi_purpose: IRC stuff -- "value added"
|
|
|
|
|
csi_relationship: |
|
|
|
|
|
There are a couple things running here.
|
2015-10-12 02:01:24 +00:00
|
|
|
|
2015-11-06 17:52:38 +00:00
|
|
|
* zodbot, a supybot instance. See the zodbot SOP for more info.
|
|
|
|
|
* fedmsg-irc, our fedmsg to IRC relay. 'journalctl -u fedmsg-irc'
|
|
|
|
|
* mote, a webapp running behind httpd that serves meetbot log files.
|
