---
fas_client_groups: retrace
freezes: false
sudoers: "{{ private }}/files/sudo/arm-retrace-sudoers"

tcp_ports: [ 80, 443 ]

custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 2049 -j ACCEPT', 
                '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 5432 -j ACCEPT' ]


nrpe_procs_warn: 900
nrpe_procs_crit: 1000

# Since retrace is on the qa network, it needs to actively connect to our
# inbound relay.
fedmsg_active: True
fedmsg_cert_prefix: faf

# Declare fedmsg certs that should be put in /etc/pki/fedmsg/
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
  owner: root
  group: retrace
  can_send:
  - logger.log
- service: faf
  owner: root
  group: faf
  can_send:
  - faf.report.threshold1
  - faf.report.threshold10
  - faf.report.threshold100
  - faf.report.threshold1000
  - faf.report.threshold1000
  - faf.report.threshold10000
  - faf.report.threshold100000
  - faf.report.threshold1000000
  - faf.problem.threshold1
  - faf.problem.threshold10
  - faf.problem.threshold100
  - faf.problem.threshold1000
  - faf.problem.threshold1000
  - faf.problem.threshold10000
  - faf.problem.threshold100000
  - faf.problem.threshold1000000