---
# Define resources for this group of hosts here.
deployment_type: prod
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
  - can_send:
      - logger.log
    group: sysadmin
    owner: root
    service: shell
  - can_send:
      - pdc.compose
      - pdc.rpms
      - pdc.images
    group: apache
    owner: root
    service: pdc
ipa_client_shell_groups:
  - sysadmin-mbs
  - sysadmin-noc
  - sysadmin-releng
  - sysadmin-veteran
ipa_client_sudo_groups:
  - sysadmin-mbs
  - sysadmin-releng
ipa_host_group: pdc-web
ipa_host_group_desc: Product Definition Center web app
lvm_size: 20000
mem_size: 8192
nagios_Check_Services:
  swap: false
num_cpus: 2
# This just defines the CN of the saml2 cert we pull from the private repo
# Don't be confused.  The app is actually served at apps.stg.fp.o/pdc
pdc_domain: pdc.fedoraproject.org
primary_auth_source: ipa
tcp_ports: [80]
# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file
wsgi_fedmsg_service: pdc
wsgi_procs: 3
wsgi_threads: 2