---
lvm_size: 20000
mem_size: 2048
num_cpus: 2

# Set this to True for the F28 release and onwards.
freezes: false

# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: odcs
wsgi_procs: 2
wsgi_threads: 2

tcp_ports: [
    80,
    # These ports all required for gluster
    111, 24007, 24008, 24009, 24010, 24011,
    49152, 49153, 49154, 49155,
]
# Also for gluster.
udp_ports: [ 111 ]

# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran

# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: odcs
  owner: apache
  group: apache
  can_send:
  - odcs.compose.state-changed

odcs_allowed_source_types: ["tag", "module"]

odcs_target_dir_url: https://odcs.stg.fedoraproject.org/composes

# Give access to jscotka to be able to develop module testing integration
# for taskotron.
odcs_allowed_clients_users:
  jscotka: {}

nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"

# For the MOTD
csi_security_category: Low
csi_primary_contact: Factory 2 factory2-members@fedoraproject.org
csi_purpose: Run the on-demand-compose-service frontend API.
csi_relationship: |
    The apache/mod_wsgi app is the only thing really running here

    This host:
    
    - relies on db01 for its database of activity (what composes have been
      requested and what state are they in?)
    - It also mounts an nfs shared provided by odcs-backend01.
    - It provides http access to the compose contents on that nfs share.

