ansible/inventory/group_vars/pagure
2023-01-20 10:58:39 -08:00

88 lines
2.4 KiB
Text

---
# Define resources for this group of hosts here.
csi_primary_contact: Fedora admins - admin@fedoraproject.org
csi_purpose: Run the pagure instances for fedora
csi_relationship: |
There are a few things running here:
- The apache/mod_wsgi app for pagure
- This host relies on:
- A postgres db server running locally
- Things that rely on this host:
- nothing currently
# For the MOTD
csi_security_category: Low
db_backup_dir: ['/backups']
dbs_to_backup: ['pagure']
env: pagure
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- can_send:
- logger.log
group: sysadmin
owner: root
service: shell
- can_send:
- pagure.git.receive
- pagure.issue.assigned.added
- pagure.issue.assigned.reset
- pagure.issue.comment.added
- pagure.issue.comment.edited
- pagure.issue.dependency.added
- pagure.issue.dependency.removed
- pagure.issue.drop
- pagure.issue.edit
- pagure.issue.new
- pagure.issue.tag.added
- pagure.issue.tag.removed
- pagure.project.deleted
- pagure.project.edit
- pagure.project.forked
- pagure.project.group.added
- pagure.project.new
- pagure.project.tag.edited
- pagure.project.tag.removed
- pagure.project.user.access.updated
- pagure.project.user.added
- pagure.pull-request.closed
- pagure.pull-request.comment.added
- pagure.pull-request.flag.added
- pagure.pull-request.flag.updated
- pagure.pull-request.new
- pagure.request.assigned.added
group: apache
owner: git
service: pagure
fedmsg_env: prod
fedmsg_prefix: io.pagure
freezes: true
host_backup_targets: ['/srv/git', '/var/www/releases']
ipa_client_shell_groups:
- sysadmin-noc
- sysadmin-web
- sysadmin-veteran
ipa_client_sudo_groups:
- sysadmin-web
ipa_host_group: pagure
ipa_host_group_desc: Pagure GIT Forge
lvm_size: 750000
max_mem_size: 131072
mem_size: 49152
num_cpus: 16
postfix_group: vpn.pagure
primary_auth_source: ipa
sshd_config: ssh/sshd_config.pagure
sshd_keyhelper: true
stunnel_destination_port: 8080
stunnel_service: "eventsource"
stunnel_source_port: 8088
# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file
tcp_ports: [22, 25, 80, 443, 8442, 8443, 8444, 8445,
# Used for the eventsource
8088,
# This is for the pagure public fedmsg relay
9940]
vpn: true