copr-be: new production F41 backend

- birthday on -temp hostname
- services_disabled: true for now
- fixed be <-> kg private IP connectivity

inventory/cloud

@@ -21,7 +21,7 @@ proxy38.fedoraproject.org
 proxy39.fedoraproject.org
 proxy40.fedoraproject.org
 copr-be.aws.fedoraproject.org
-#copr-be-temp.aws.fedoraproject.org
+copr-be-temp.aws.fedoraproject.org
 copr-be-dev.aws.fedoraproject.org
 #copr-be-dev-temp.aws.fedoraproject.org
 copr-dist-git.aws.fedoraproject.org

inventory/group_vars/copr_aws

@@ -49,7 +49,7 @@ copr_aws_region: us-east-1
 # don't forget to update ip in ./copr-keygen, due to custom firewall rules
 
 # eth0, eth1
-copr_backend_ips: ["52.44.175.77", "172.30.2.240"]
+copr_backend_ips: ["52.44.175.77", "172.30.2.142"]
 
 copr_builder_fedora_version: 39
 

inventory/group_vars/copr_back_aws

@@ -46,7 +46,7 @@ tcp_ports: [
     # node_exporter/prometheus
     9100,
 ]
-services_disabled: false
+services_disabled: true
 
 aws_ipv6_addr: "2600:1f18:8ee:ae00:d553:8ed5:d8b6:9f83/128"
 

inventory/group_vars/copr_keygen_aws

@@ -6,13 +6,13 @@ copr_hostbase: copr-keygen
 custom_rules:
     - '-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport   80 -j ACCEPT'
     - '-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport 5167 -j ACCEPT'
-    - '-A INPUT -p tcp -m tcp -s 172.30.2.240 --dport   80 -j ACCEPT'
-    - '-A INPUT -p tcp -m tcp -s 172.30.2.240 --dport 5167 -j ACCEPT'
+    - '-A INPUT -p tcp -m tcp -s 172.30.2.142 --dport   80 -j ACCEPT'
+    - '-A INPUT -p tcp -m tcp -s 172.30.2.142 --dport 5167 -j ACCEPT'
 freezes: false
 tcp_ports: [22,
     # node_exporter/prometheus
     9100,
 ]
-services_disabled: false
+services_disabled: true
 
 aws_ipv6_addr: "2600:1f18:8ee:ae00:acef:63f0:530a:cdff/128"

inventory/inventory

@@ -780,7 +780,7 @@ copr-fe.aws.fedoraproject.org birthday=yes
 
 [copr_back_aws]
 copr-be.aws.fedoraproject.org
-#copr-be-temp.aws.fedoraproject.org
+copr-be-temp.aws.fedoraproject.org birthday=yes
 
 [copr_dist_git_aws]
 copr-dist-git.aws.fedoraproject.org