autosign: make connections from sigul stateless

This commit is contained in:
Till Maas 2015-12-07 19:54:43 +01:00
parent 8832f7c5ca
commit fd9c8ac5a3

View file

@ -7,6 +7,10 @@ num_cpus: 2
# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file
# Make connections from signing bridges stateless, they break sigul connections
# https://bugzilla.redhat.com/show_bug.cgi?id=1283364
custom_rules: ['-A INPUT --proto tcp --sport 44334 --souce sign-bridge01.phx2.fedoraproject.org,secondary-bridge01.qa.fedoraproject.org -j ACCEPT']
fas_client_groups: sysadmin-releng
host_group: autosign