---
lvm_size: 100000
mem_size: 4096
num_cpus: 4

tcp_ports: [ 80, 443 ]

# We have both celery (pagure_worker) and web thread wanting to send out fedmsg's.
# To make things easy on the listening side (so avoid contention of binding ports), let's set the pkgs boxes to active fedmsg.
fedmsg_active: True

# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: pagure
wsgi_procs: 6
wsgi_threads: 6

fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-veteran
fas_client_restricted_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/libexec/pagure/aclchecker.py %(username)s
fas_client_admin_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/libexec/pagure/aclchecker.py %(username)s
fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
admin_groups: "@sysadmin-cvs @sysadmin-releng"

clamscan_mailto: admin@fedoraproject.org
clamscan_paths:
- /srv/cache/lookaside/pkgs
clamscan_excludes:
- clamav-
- amavisd-new-2.3.3.tar.gz
- bro-20080804.tgz
- mailman-
- sagator-
- nicotine
- fwsnort-1.0.6.tar.gz
- psad-2.1.7.tar.bz2
- pymilter-
- linkchecker-
- julia-0.3.7.tar.gz
- jbossws-cxf-5.1.5.Final.zip
- wss4j-2.1.5-source-release.zip
- python-impacket-0.9.14-67fc19e.tar.gz

# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
  owner: root
  group: sysadmin
  can_send:
  - git.branch
  - git.mass_branch.complete
  - git.mass_branch.start
  - logger.log
  - pagure.git.receive
- service: scm
  owner: root
  group: packager
  can_send:
  - git.receive
  - pagure.git.receive
- service: lookaside
  owner: root
  group: apache
  can_send:
  - git.lookaside.new
- service: pagure
  owner: pagure
  group: apache
  can_send:
  - pagure.git.receive
  - pagure.issue.assigned.added
  - pagure.issue.assigned.reset
  - pagure.issue.comment.added
  - pagure.issue.dependency.added
  - pagure.issue.dependency.removed
  - pagure.issue.edit
  - pagure.issue.new
  - pagure.issue.tag.added
  - pagure.issue.tag.removed
  - pagure.project.edit
  - pagure.project.forked
  - pagure.project.group.added
  - pagure.project.new
  - pagure.project.tag.edited
  - pagure.project.tag.removed
  - pagure.project.user.added
  - pagure.project.user.removed
  - pagure.pull-request.closed
  - pagure.pull-request.comment.added
  - pagure.pull-request.comment.edited
  - pagure.pull-request.flag.added
  - pagure.pull-request.flag.updated
  - pagure.pull-request.new
  - pagure.request.assigned.added