29 lines
1.3 KiB
Text
29 lines
1.3 KiB
Text
---
|
|
lvm_size: 20000
|
|
mem_size: 8192
|
|
num_cpus: 4
|
|
# for systems that do not match the above - specify the same parameter in
|
|
# the host_vars/$hostname file
|
|
|
|
custom_rules: [ '-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 80 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 192.168.0.0/16 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 80 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.0/24 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 67.219.144.68/32 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 5.175.150.50/32 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 152.19.134.142/32 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 140.211.169.196/32 --dport 443 -j ACCEPT', ]
|
|
|
|
custom6_rules: [ '-A INPUT -p tcp -m tcp -s 2610:28:3090:3001:dead:beef:cafe:fed3 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 2604:1580:fe00:0:dead:beef:cafe:fed1 --dport 443 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 2a00:d1a0:1::131 --dport 443 -j ACCEPT', ]
|
|
|
|
collectd_apache: true
|
|
fas_client_groups: sysadmin-web,sysadmin-noc,fi-apprentice,sysadmin-veteran
|
|
nrpe_procs_warn: 1200
|
|
nrpe_procs_crit: 1400
|
|
# By default run 45 wsgi procs
|
|
mirrorlist_procs: 60
|
|
|
|
# Set this to get the vpn postfix setup
|
|
postfix_group: vpn
|