2014-01-09 16:50:45 +00:00
|
|
|
---
|
2015-01-26 17:42:35 +00:00
|
|
|
# Define resources for this group of hosts here.
|
2014-01-09 16:50:45 +00:00
|
|
|
lvm_size: 20000
|
|
|
|
|
mem_size: 2048
|
|
|
|
|
num_cpus: 2
|
|
|
|
|
|
2014-02-16 16:51:40 +00:00
|
|
|
tcp_ports: [ 80, 443,
|
2015-03-18 14:17:37 +00:00
|
|
|
# This port is required by gluster
|
|
|
|
|
6996,
|
2014-02-16 16:51:40 +00:00
|
|
|
# These 8 ports are used by fedmsg. One for each wsgi thread.
|
|
|
|
|
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007]
|
2014-01-09 16:50:45 +00:00
|
|
|
|
2014-07-18 20:42:00 +00:00
|
|
|
# Neeed for rsync from log01 for logs.
|
|
|
|
|
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
|
2014-03-17 16:31:27 +00:00
|
|
|
|
2016-05-17 00:18:04 +00:00
|
|
|
fas_client_groups: sysadmin-noc,sysadmin-ask,fi-apprentice,sysadmin-veteran
|
2014-01-16 22:21:09 +00:00
|
|
|
|
2015-02-24 14:05:02 +00:00
|
|
|
freezes: false
|
|
|
|
|
|
2014-03-14 15:47:11 +00:00
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
2014-01-16 22:21:09 +00:00
|
|
|
fedmsg_certs:
|
|
|
|
|
- service: shell
|
|
|
|
|
owner: root
|
|
|
|
|
group: sysadmin
|
2015-12-03 19:30:08 +00:00
|
|
|
can_send:
|
|
|
|
|
- logger.log
|
2014-01-16 22:21:09 +00:00
|
|
|
- service: askbot
|
|
|
|
|
owner: root
|
2014-01-16 22:24:11 +00:00
|
|
|
group: apache
|
2015-06-12 18:22:15 +00:00
|
|
|
can_send:
|
|
|
|
|
- askbot.post.delete
|
|
|
|
|
- askbot.post.edit
|
|
|
|
|
- askbot.post.flag_offensive.add
|
|
|
|
|
- askbot.post.flag_offensive.delete
|
|
|
|
|
- askbot.tag.update
|
2015-01-26 17:42:35 +00:00
|
|
|
|
2016-02-02 17:28:44 +00:00
|
|
|
virt_install_command: "{{ virt_install_command_rhel6 }}"
|
|
|
|
|
|
2015-01-26 17:42:35 +00:00
|
|
|
# For the MOTD
|
|
|
|
|
csi_security_category: Low
|
|
|
|
|
csi_primary_contact: Fedora admins - admin@fedoraproject.org
|
|
|
|
|
csi_purpose: Run the django webapp for ask.fedoraproject.org
|
|
|
|
|
csi_relationship: |
|
|
|
|
|
This depends on:
|
|
|
|
|
|
|
|
|
|
- The database server on db01.
|
|
|
|
|
- memcached (specifically memcached02), but only in production. In staging,
|
|
|
|
|
a local-memory backend is used instead.
|
|
|
|
|
|
|
|
|
|
Gotchas:
|
|
|
|
|
|
|
|
|
|
- The packages for celery are installed, but we do not actually run or
|
|
|
|
|
depend on the celery daemon.
|
|
|
|
|
- There are *lots* of hotfixes in effect on this machine.
|
