---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
volgroup: /dev/vg_guests00
eth0_ip: 10.5.126.99
vmhost: virthost05.phx2.fedoraproject.org
datacenter: phx2

ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/

# This is a generic list, monitored by collectd
databases:
- fas2

# This is a more strict list, to be made publicly available
dbs_to_backup:
- fas2

# These are normally group variables, but in this case db servers are often different
lvm_size: 100000
mem_size: 8192
num_cpus: 4
fas_client_groups: sysadmin-dba,sysadmin-noc

#
# Only allow postgresql access from the frontend nodes and hosted.
#
custom_rules: [
    # fas01, fas02, and fas03
    '-A INPUT -p tcp -m tcp -s 10.5.126.25   --dport 5432 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 10.5.126.26   --dport 5432 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 10.5.126.30   --dport 5432 -j ACCEPT',

    # fedoauth01 and fedoauth02
    '-A INPUT -p tcp -m tcp -s 10.5.126.240  --dport 5432 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 10.5.126.241  --dport 5432 -j ACCEPT' ,

    # ipsilon01 and ipsilon02
    '-A INPUT -p tcp -m tcp -s 10.5.126.46  --dport 5432 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 10.5.126.47  --dport 5432 -j ACCEPT' ,

    # sundries02...
    '-A INPUT -p tcp -m tcp -s 10.5.126.41   --dport 5432 -j ACCEPT',

    # hosted03 and hosted04 (over the vpn)
    '-A INPUT -p tcp -m tcp -s 192.168.1.16  --dport 5432 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 192.168.1.102 --dport 5432 -j ACCEPT',
    ]

#
# Large updates pushes cause lots of db threads doing the tag moves, so up this from default. 
# 
nrpe_procs_warn: 400
nrpe_procs_crit: 500

host_backup_targets: ['/backups']
shared_buffers: "32MB"
