6428f8f772
This commit is removing all the fedmsg related stuff from ansible repository. Signed-off-by: Michal Konecny <mkonecny@redhat.com>
69 lines
1.9 KiB
Text
69 lines
1.9 KiB
Text
---
|
|
ansible_base: /srv/web/infra
|
|
# For the MOTD
|
|
# Neeed for rsync from log01 for logs.
|
|
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
|
|
nft_custom_rules:
|
|
- 'add rule ip filter INPUT ip saddr 10.3.163.39 tcp dport 873 counter accept'
|
|
- 'add rule ip filter INPUT ip saddr 192.168.1.59 tcp dport 873 counter accept'
|
|
#
|
|
# This host is externally reachable
|
|
#
|
|
external: true
|
|
freezes: true
|
|
ipa_client_shell_groups:
|
|
- fi-apprentice
|
|
- sysadmin-ask
|
|
- sysadmin-badges
|
|
- sysadmin-bot
|
|
- sysadmin-centos
|
|
- sysadmin-cloud
|
|
- sysadmin-copr
|
|
- sysadmin-coreos
|
|
- sysadmin-cvs
|
|
- sysadmin-datanommer
|
|
- sysadmin-debuginfod
|
|
- sysadmin-koschei
|
|
- sysadmin-libravatar
|
|
- sysadmin-messaging
|
|
- sysadmin-noc
|
|
- sysadmin-osbuild
|
|
- sysadmin-openscanhub
|
|
- sysadmin-qa
|
|
- sysadmin-retrace
|
|
- sysadmin-releasemonitoring
|
|
- sysadmin-releng
|
|
- sysadmin-tools
|
|
- sysadmin-upstreamfirst
|
|
- sysadmin-veteran
|
|
- sysadmin-web
|
|
ipa_host_group: batcave
|
|
ipa_host_group_desc: The Bat Cave
|
|
lvm_size: 750000
|
|
mem_size: 24576
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 10
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443, 8442, 8443]
|
|
vpn: true
|
|
nagios_Check_Services:
|
|
swap: false
|
|
|
|
notes: |
|
|
Central management host for ansible
|
|
|
|
From the batcave batman ventures out to fight crime and protect gotham city!
|
|
|
|
batcave is the central management host for ansible.
|
|
It also is the infrastructure.fedoraproject.org website with various content.
|
|
It houses a number of infrastructure git repos.
|
|
|
|
This host relies on:
|
|
* The virthost it's hosted on (virthost22)
|
|
|
|
Things that rely on this host:
|
|
* Things that access rhel/fedora/infra rpm repos, including builders and infra hosts.
|
|
* If this host is down, ansible runs cannot be made to update other hosts.
|
|
* If this host is down, crime may go up in gotham city.
|