---
# Define resources for this group of hosts here.
# Neeed for rsync from log01 for logs.
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
  - can_send:
      - logger.log
    group: sysadmin
    owner: root
    service: shell
  - can_send:
      - kerneltest.release.edit
      - kerneltest.release.new
      - kerneltest.upload.new
    group: apache
    owner: root
    service: kerneltest
ipa_client_shell_groups:
  - sysadmin-noc
  - sysadmin-veteran
ipa_host_group: kerneltest
lvm_size: 20000
mem_size: 4096
num_cpus: 2
primary_auth_source: ipa
tcp_ports: [80]
# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: kerneltest
wsgi_procs: 2
wsgi_threads: 1