---
# Define resources for this group of hosts here.
lvm_size: 8000
mem_size: 2048
num_cpus: 1

# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file

koschei_topurl: https://apps.stg.fedoraproject.org/koschei
# koschei database on pgbdr.stg is in inconsistent state, so we're
# using non-BDR db01.stg for now.
koschei_pgsql_hostname: db01.stg.phx2.fedoraproject.org
koschei_kojipkgs: koji.stg.fedoraproject.org
koschei_koji_web: koji.stg.fedoraproject.org
koschei_oidc_provider: id.stg.fedoraproject.org
koschei_bugzilla: bugzilla5.redhat.com

koschei_oidc_client_secret: "{{ koschei_oidc_client_secret_stg }}"
koschei_oidc_crypto_secret: "{{ koschei_oidc_crypto_secret_stg }}"

tcp_ports: [ 80, 443 ]

custom_rules: [
    # Need for rsync from log01 for logs.
    '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT',
    '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
 ]

fas_client_groups: sysadmin-koschei,fi-apprentice,sysadmin-noc,sysadmin-veteran

freezes: false

# For the MOTD
csi_security_category: Low
csi_primary_contact: Fedora admins - admin@fedoraproject.org
csi_purpose: Koschei continuous integration system
csi_relationship: |
    This machine depends on:
    - PostgreSQL DB server
    - Pagure API on dist-git
    - bastion (for mail relay)
    - memcached01
