---
# Define resources for this group of hosts here.
custom_rules: [
  # Needed for keepalived
  '-A INPUT -d 224.0.0.0/8 -j ACCEPT', '-A INPUT -p vrrp -j ACCEPT']
docker_registry: "candidate-registry.fedoraproject.org"
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
  - can_send:
      - logger.log
    group: sysadmin
    owner: root
    service: shell
  - can_send:
      - buildsys.build.state.change
      - buildsys.package.list.change
      - buildsys.repo.done
      - buildsys.repo.init
      - buildsys.rpm.sign
      - buildsys.tag
      - buildsys.task.state.change
      - buildsys.untag
    group: apache
    owner: root
    service: koji
ipa_client_shell_groups:
  - sysadmin-releng
ipa_client_sudo_groups:
  - sysadmin-releng
ipa_host_group: kojihub
ipa_host_group_desc: Koji Hub hosts
koji_hub: "koji.fedoraproject.org/kojihub"
koji_root: "koji.fedoraproject.org/koji"
lvm_size: 30000
mem_size: 32768
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
num_cpus: 16
osbs_url: "osbs.fedoraproject.org"
primary_auth_source: ipa
source_registry: "registry.fedoraproject.org"
# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file
tcp_ports: [80, 443, 111, 2049,
  # These 8 ports are used by fedmsg.  One for each wsgi thread.
  3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007]
udp_ports: [111, 2049]
virt_install_command: "{{ virt_install_command_two_nic }}"