Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr: point playbooks to new set of (elastic) IPs

Browse source
This commit is contained in:
Pavel Raiskup 2020-11-13 10:05:21 +01:00
parent 251f351192
commit f14b897b1f
7 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/copr_aws
View file

@ -9,8 +9,8 @@ _forward_src: "forward"
# don't forget to update ip in ./copr-keygen, due to custom firewall rules
# eth0, eth1
copr_backend_ips: ["34.227.76.72", "172.30.2.166"]
keygen_host: "52.202.64.55"
copr_backend_ips: ["52.44.175.77", "172.30.2.203"]
keygen_host: "54.83.48.73"
backend_base_url: "https://download.copr.fedorainfracloud.org"
postfix_group: copr

8
inventory/group_vars/copr_keygen_aws
View file

@ -4,10 +4,10 @@ copr_hostbase: copr-keygen
tcp_ports: [22]
# http + signd dest ports
custom_rules: [ '-A INPUT -p tcp -m tcp -s 34.227.76.72 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 34.227.76.72 --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.166 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.166 --dport 5167 -j ACCEPT']
custom_rules: [ '-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.203 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.203 --dport 5167 -j ACCEPT']
datacenter: aws

2
inventory/host_vars/copr-be.aws.fedoraproject.org
View file

@ -2,7 +2,7 @@ swap_file_size_mb: 16384
swap_file_path: /swap
hostbase: copr-be-
public_ip: 34.227.76.72
public_ip: 52.44.175.77
nagios_Check_Services:
mail: false

2
inventory/host_vars/copr-fe.aws.fedoraproject.org
View file

@ -10,7 +10,7 @@ swap_file_size_mb: 8192
swap_file_path: /swap
hostbase: copr-fe-
public_ip: 3.81.0.123
public_ip: 3.225.109.36
root_auth_users: msuchy frostyx praiskup schlupov
description: copr frontend server - prod instance

2
inventory/host_vars/copr-keygen.aws.fedoraproject.org
View file

@ -13,7 +13,7 @@ db_backup_dir: ['/backup']
#image: "{{ fedora31_x86_64 }}"
#keypair: fedora-admin-20130801
hostbase: copr-keygen-dev-
public_ip: 52.202.64.55
public_ip: 54.83.48.73
root_auth_users: msuchy frostyx praiskup schlupov
description: copr key gen and sign host - prod instance

2
roles/base/files/postfix/main.cf/main.cf.gateway
View file

@ -296,7 +296,7 @@ unknown_local_recipient_reject_code = 550
#mynetworks = $config_directory/mynetworks
#mynetworks = hash:/etc/postfix/network_table
mynetworks = localhost.localdomain, localhost, 127.0.0.1, 10.3.160.0/19, 192.168.0.0/16, 54.162.233.242, 3.81.0.123
mynetworks = localhost.localdomain, localhost, 127.0.0.1, 10.3.160.0/19, 192.168.0.0/16, 54.162.233.242, 3.225.109.36
# The relay_domains parameter restricts what destinations this system will
# relay mail to. See the smtpd_recipient_restrictions description in

2
roles/opendkim/files/TrustedHosts
View file

@ -7,7 +7,7 @@
::1
10.3.160.0/19
192.168.0.0/16
3.81.0.123
3.225.109.36
54.162.233.242
#host.example.com