mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-03 07:04:23 +08:00
Import some more rabbitmq cluster config
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
@@ -1,6 +1,24 @@
|
||||
[
|
||||
{rabbit,
|
||||
[
|
||||
%% We do not want plain TCP, only TLS
|
||||
{tcp_listeners, []},
|
||||
%% Here goes TLS
|
||||
{ssl_listeners, [5671]},
|
||||
{ssl_options, [{cacertfile, "/etc/rabbitmq/ca.crt"},
|
||||
{certfile, "/etc/rabbitmq/node.crt"},
|
||||
{keyfile, "/etc/rabbitmq/node.key"},
|
||||
{verify, verify_peer},
|
||||
{fail_if_no_peer_cert, true}]},
|
||||
{auth_mechanisms, ['EXTERNAL']},
|
||||
|
||||
%% Here goes the cluster config
|
||||
{cluster_nodes, {['rabbit@rabbitmq01{{env_suffix}}.phx2.fedoraproject.org',
|
||||
'rabbit@rabbitmq02{{env_suffix}}.phx2.fedoraproject.org'
|
||||
'rabbit@rabbitmq03{{env_suffix}}.phx2.fedoraproject.org'],
|
||||
disc}},
|
||||
|
||||
%% And some general config
|
||||
{log_levels, [{connection, none}]},
|
||||
{default_user_tags, [administrator]},
|
||||
{heartbeat, 600},
|
||||
@@ -11,6 +29,11 @@
|
||||
]},
|
||||
{rabbitmq_management,
|
||||
[
|
||||
{listener, [{port, 15672},
|
||||
{ssl, true},
|
||||
{ssl_opts, [{cacertfile, "/etc/rabbitmq/ca.crt"},
|
||||
{certfile, "/etc/rabbitmq/node.crt"},
|
||||
{keyfile, "/etc/rabbitmq/node.key"}]}]},
|
||||
]},
|
||||
|
||||
{rabbitmq_management_agent,
|
||||
|
||||
Reference in New Issue
Block a user