inventory: add a db-fas01.iad

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

inventory/host_vars/db-fas01.iad2.fedoraproject.org

@@ -0,0 +1,46 @@
+---
+nm: 255.255.255.0
+gw: 10.3.163.254
+dns: 10.3.163.33
+volgroup: /dev/vg_guests
+eth0_ip: 10.3.163.42
+vmhost: vmhost-x86-01.iad2.fedoraproject.org
+datacenter: iad2
+
+ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-8-ext
+ks_repo: http://209.132.181.6/repo/rhel/RHEL8-x86_64/
+
+# This is a generic list, monitored by collectd
+databases:
+- fas2
+
+# This is a more strict list, to be made publicly available
+dbs_to_backup:
+- fas2
+
+# These are normally group variables, but in this case db servers are often different
+lvm_size: 100000
+mem_size: 16384
+num_cpus: 8
+fas_client_groups: sysadmin-dba,sysadmin-noc,sysadmin-veteran
+
+#
+# Only allow postgresql access from the frontend nodes and hosted.
+#
+custom_rules: [
+    # Openshift nodes (egress policy will block connection from non-authorized projects)
+    '-A INPUT -p tcp -m tcp -s 10.3.163.69   --dport 5432 -j ACCEPT',
+    '-A INPUT -p tcp -m tcp -s 10.3.163.70   --dport 5432 -j ACCEPT',
+    '-A INPUT -p tcp -m tcp -s 10.3.163.71   --dport 5432 -j ACCEPT',
+    '-A INPUT -p tcp -m tcp -s 10.3.163.72   --dport 5432 -j ACCEPT',
+    '-A INPUT -p tcp -m tcp -s 10.3.163.73   --dport 5432 -j ACCEPT',
+]
+#
+# Large updates pushes cause lots of db threads doing the tag moves, so up this from default. 
+# 
+nrpe_procs_warn: 600
+nrpe_procs_crit: 800
+
+db_backup_dir: ['/backups']
+shared_buffers: "2GB"
+effective_cache_size: "6GB"

inventory/inventory

@@ -224,6 +224,7 @@ autosign01.stg.phx2.fedoraproject.org
 db01.phx2.fedoraproject.org
 db03.phx2.fedoraproject.org
 db-fas01.phx2.fedoraproject.org
+db-fas01.iad2.fedoraproject.org
 db-datanommer02.phx2.fedoraproject.org
 db-koji01.phx2.fedoraproject.org
 db-koji02.phx2.fedoraproject.org