---
# Define resources for this group of hosts here.
lvm_size: 250000
mem_size: 32768
num_cpus: 12

# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file

tcp_ports: [ 22, 25, 80, 443, 9418,
    8443, 8444,
    # Used for the eventsource
    8088,
    # This is for the pagure public fedmsg relay
    9940]

stunnel_service: "eventsource"
stunnel_source_port: 8088
stunnel_destination_port: 8080

sshd_config: ssh/sshd_config.pagure

# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
  owner: root
  group: sysadmin
  can_send:
  - logger.log
- service: pagure
  owner: git
  group: apache
  can_send:
  - pagure.git.receive
  - pagure.issue.assigned.added
  - pagure.issue.assigned.reset
  - pagure.issue.comment.added
  - pagure.issue.comment.edited
  - pagure.issue.dependency.added
  - pagure.issue.dependency.removed
  - pagure.issue.drop
  - pagure.issue.edit
  - pagure.issue.new
  - pagure.issue.tag.added
  - pagure.issue.tag.removed
  - pagure.project.deleted
  - pagure.project.edit
  - pagure.project.forked
  - pagure.project.group.added
  - pagure.project.new
  - pagure.project.tag.edited
  - pagure.project.tag.removed
  - pagure.project.user.access.updated
  - pagure.project.user.added
  - pagure.pull-request.closed
  - pagure.pull-request.comment.added
  - pagure.pull-request.flag.added
  - pagure.pull-request.flag.updated
  - pagure.pull-request.new
  - pagure.request.assigned.added

fedmsg_prefix: io.pagure
fedmsg_env: prod

fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

freezes: true
postfix_group: vpn.pagure

host_backup_targets: ['/srv/git', '/var/www/releases']
db_backup_dir: ['/backups']
dbs_to_backup: ['pagure']

# Configuration for the git-daemon/server
git_group: git
git_port: 9418
git_server: /usr/libexec/git-core/git-daemon
git_server_args: --export-all --syslog --inetd --verbose
git_basepath: /srv/git/repositories
git_daemon_user: git

# For the MOTD
csi_security_category: Low
csi_primary_contact: Fedora admins - admin@fedoraproject.org
csi_purpose: Run the pagure instances for fedora
csi_relationship: |
    There are a few things running here:

    - The apache/mod_wsgi app for pagure

    - This host relies on:
      - A postgres db server running locally

    - Things that rely on this host:
      - nothing currently