---
lvm_size: 30000
mem_size: 2048
num_cpus: 2

freezes: true

# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: odcs
wsgi_procs: 2
wsgi_threads: 2

tcp_ports: [
    80,
    # These ports all required for gluster
    111, 24007, 24008, 24009, 24010, 24011,
    49152, 49153, 49154, 49155,
]
# Also for gluster.
udp_ports: [ 111 ]

# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]

fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-odcs,sysadmin-veteran

# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: odcs
  owner: apache
  group: apache
  can_send:
  - odcs.compose.state-changed


odcs_target_dir_url: https://odcs.fedoraproject.org/composes
# Give access to jscotka to be able to develop module testing integration
# for taskotron.
# Give access to sgallagh to be able to generate testing composes for new
# modules.
odcs_allowed_clients_users: {"jscotka": {}, "sgallagh": {}}

virt_install_command: "{{ virt_install_command_two_nic }}"

nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"

# For the MOTD
csi_security_category: Low
csi_primary_contact: Factory 2 factory2-members@fedoraproject.org
csi_purpose: Run the on-demand-compose-service frontend API.
csi_relationship: |
    The apache/mod_wsgi app is the only thing really running here

    This host:
    
    - relies on db01 for its database of activity (what composes have been
      requested and what state are they in?)
    - It also mounts an nfs shared provided by odcs-backend01.
    - It provides http access to the compose contents on that nfs share.