---
storage:
  state: /var/lib/repospanner/{{ region }}/state
  git:
    type: tree
    clustered: true
    directory: /var/lib/repospanner/{{ region }}/gitstore
listen:
  rpc:  0.0.0.0:{{ rpc_port }}
  http: 0.0.0.0:{{ http_port }}
certificates:
  ca: /etc/repospanner/ca.crt
  client:
    cert: /etc/repospanner/node-{{region}}.crt
    key:  /etc/repospanner/node-{{region}}.key
  server:
    default:
      cert: /etc/repospanner/node-{{region}}.crt
      key:  /etc/repospanner/node-{{region}}.key
hooks:
  bubblewrap:
    enabled: false
    unshare:
    - net
    - ipc
    - pid
    - uts
    share_net: false
    mount_proc: true
    mount_dev: true
    uid:
    gid:
    hostname: myhostname
    bind:
    ro_bind:
    - - /usr
      - /usr
    symlink:
    - - usr/lib64
      - /lib64
    - - usr/bin
      - /bin
  runner: /usr/libexec/repohookrunner
  user: 0
