Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Enable FAS -> IPA sync in production

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-10-13 15:46:47 +00:00
parent 7b19073b0d
commit 674c930093
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/fas_server/templates/fas.cfg.j2
View file

@ -57,19 +57,20 @@ country_blacklist = ["--", "A1", "A2", "AN", "AS", "AX", "BI", "BL", "BV", "CC",
tgcaptcha2.key = '{{ fasCaptchaSecret }}'
tgcaptcha2.jpeg_generator = 'vanasco_dowty'
{% if env == "staging" %}
###
### IPA Sync settings
###
ipa_sync_enabled = True
ipa_sync_server = 'ipa01.stg.phx2.fedoraproject.org'
ipa_sync_principal = 'fas_sync@STG.FEDORAPROJECT.ORG'
ipa_sync_keytab = '/etc/fas_sync_keytab'
ipa_sync_certfile = '/etc/fas_sync_cert.pem'
{% if env == "staging" %}
ipa_sync_principal = 'fas_sync@STG.FEDORAPROJECT.ORG'
ipa_sync_server = 'ipa01.stg.phx2.fedoraproject.org'
{% else %}
ipa_sync_enabled = False
ipa_sync_principal = 'fas_sync@FEDORAPROJECT.ORG'
ipa_sync_server = 'ipa01.phx2.fedoraproject.org'
{% endif %}
###
### Administrative settings
###