mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-27 03:52:09 +08:00
109 lines
3.1 KiB
Plaintext
109 lines
3.1 KiB
Plaintext
---
|
|
lvm_size: 100000
|
|
mem_size: 4096
|
|
num_cpus: 4
|
|
|
|
tcp_ports: [80, 443,
|
|
# These 16 ports are used by fedmsg. One for each wsgi thread.
|
|
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
|
|
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
|
|
|
|
custom_rules: [ '-A INPUT -p tcp -m tcp --dport 9418 -j ACCEPT']
|
|
|
|
# We have both celery (pagure_worker) and web thread wanting to send out fedmsg's.
|
|
# To make things easy on the listening side (so avoid contention of binding ports), let's set the pkgs boxes to active fedmsg.
|
|
fedmsg_active: True
|
|
|
|
# Definining these vars has a number of effects
|
|
# 1) mod_wsgi is configured to use the vars for its own setup
|
|
# 2) iptables opens enough ports for all threads for fedmsg
|
|
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
|
|
wsgi_fedmsg_service: pagure
|
|
wsgi_procs: 6
|
|
wsgi_threads: 6
|
|
|
|
fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc,sysadmin-veteran
|
|
fas_client_restricted_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s
|
|
fas_client_admin_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s
|
|
fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
|
|
admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc @sysadmin-veteran"
|
|
|
|
git_group: packager
|
|
git_port: 9418
|
|
git_server: /usr/libexec/git-core/git-daemon
|
|
git_server_args: --export-all --syslog --inetd --verbose
|
|
git_basepath: /srv/git/repositories
|
|
git_daemon_user: nobody
|
|
|
|
clamscan_mailto: admin@fedoraproject.org
|
|
clamscan_paths:
|
|
- /srv/cache/lookaside/pkgs
|
|
clamscan_excludes:
|
|
- clamav-
|
|
- amavisd-new-2.3.3.tar.gz
|
|
- bro-20080804.tgz
|
|
- mailman-
|
|
- sagator-
|
|
- nicotine
|
|
- fwsnort-1.0.6.tar.gz
|
|
- psad-2.1.7.tar.bz2
|
|
- pymilter-
|
|
- linkchecker-
|
|
- julia-0.3.7.tar.gz
|
|
- jbossws-cxf-5.1.5.Final.zip
|
|
- wss4j-2.1.5-source-release.zip
|
|
- python-impacket-0.9.14-67fc19e.tar.gz
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
fedmsg_certs:
|
|
- service: shell
|
|
owner: root
|
|
group: sysadmin
|
|
can_send:
|
|
- git.branch
|
|
- git.mass_branch.complete
|
|
- git.mass_branch.start
|
|
- git.pkgdb2branch.complete
|
|
- git.pkgdb2branch.start
|
|
- logger.log
|
|
- pagure.git.receive
|
|
- service: scm
|
|
owner: root
|
|
group: packager
|
|
can_send:
|
|
- git.receive
|
|
- pagure.git.receive
|
|
- service: lookaside
|
|
owner: root
|
|
group: apache
|
|
can_send:
|
|
- git.lookaside.new
|
|
- service: pagure
|
|
owner: pagure
|
|
group: apache
|
|
can_send:
|
|
- pagure.issue.assigned.added
|
|
- pagure.issue.assigned.reset
|
|
- pagure.issue.comment.added
|
|
- pagure.issue.dependency.added
|
|
- pagure.issue.dependency.removed
|
|
- pagure.issue.edit
|
|
- pagure.issue.new
|
|
- pagure.issue.tag.added
|
|
- pagure.issue.tag.removed
|
|
- pagure.project.edit
|
|
- pagure.project.forked
|
|
- pagure.project.group.added
|
|
- pagure.project.new
|
|
- pagure.project.tag.edited
|
|
- pagure.project.tag.removed
|
|
- pagure.project.user.added
|
|
- pagure.pull-request.closed
|
|
- pagure.pull-request.comment.added
|
|
- pagure.pull-request.flag.added
|
|
- pagure.pull-request.flag.updated
|
|
- pagure.pull-request.new
|
|
- pagure.request.assigned.added
|
|
- pagure.git.receive
|
|
|