ansible/inventory/group_vars/people
Nils Philippsen ab642e1266 ipa/client: enable for people in prod
Signed-off-by: Nils Philippsen <nils@redhat.com>
2021-03-24 13:44:32 +01:00

53 lines
1.3 KiB
Text

---
clamscan_mailto: admin@fedoraproject.org
clamscan_paths:
- /srv/
# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
git_port: 9418
git_server: /usr/libexec/git-core/git-daemon
git_server_args: --export-all --syslog --inetd --verbose
git_basepath: /
git_daemon_user: nobody
primary_auth_source: ipa
ipa_host_group: people
ipa_host_group_desc: A place for people to host things
# fedora-contributors is an umbrella group containing all others
ipa_client_shell_groups:
- fedora-contributor
fedmsg_certs:
- service: shell
owner: root
group: sysadmin
can_send:
- logger.log
- service: planet
owner: root
group: planet-user
can_send:
- planet.post.new
# enable sftp for cotributors.
sshd_sftp: true
# For the MOTD
csi_security_category: Low
csi_primary_contact: Fedora admins - admin@fedoraproject.org
csi_purpose: Provide hosting space for Fedora contributors and Fedora Planet
csi_relationship: |
- shell accounts and web space for fedora contributors
- web space for personal yum repos
- shared space for small group/personal git repos
Please be aware that this is a shared server, and you should not upload
Private/Secret SSH or GPG keys onto this system. Any such keys found
will be deleted.
blocked_ips: [
]