mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-24 18:41:38 +08:00
96 lines
2.7 KiB
Plaintext
96 lines
2.7 KiB
Plaintext
---
|
|
lvm_size: 100000
|
|
mem_size: 4096
|
|
num_cpus: 4
|
|
|
|
tcp_ports: [ 80, 443 ]
|
|
|
|
# We have both celery (pagure_worker) and web thread wanting to send out fedmsg's.
|
|
# To make things easy on the listening side (so avoid contention of binding ports), let's set the pkgs boxes to active fedmsg.
|
|
fedmsg_active: True
|
|
|
|
# Definining these vars has a number of effects
|
|
# 1) mod_wsgi is configured to use the vars for its own setup
|
|
# 2) iptables opens enough ports for all threads for fedmsg
|
|
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
|
|
wsgi_fedmsg_service: pagure
|
|
wsgi_procs: 6
|
|
wsgi_threads: 6
|
|
|
|
fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-noc,sysadmin-veteran
|
|
fas_client_restricted_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/libexec/pagure/aclchecker.py %(username)s
|
|
fas_client_admin_app: PAGURE_CONFIG=/etc/pagure/pagure_hook.cfg HOME=/srv/git /usr/libexec/pagure/aclchecker.py %(username)s
|
|
fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
|
|
admin_groups: "@sysadmin-cvs @sysadmin-releng"
|
|
|
|
clamscan_mailto: admin@fedoraproject.org
|
|
clamscan_paths:
|
|
- /srv/cache/lookaside/pkgs
|
|
clamscan_excludes:
|
|
- clamav-
|
|
- amavisd-new-2.3.3.tar.gz
|
|
- bro-20080804.tgz
|
|
- mailman-
|
|
- sagator-
|
|
- nicotine
|
|
- fwsnort-1.0.6.tar.gz
|
|
- psad-2.1.7.tar.bz2
|
|
- pymilter-
|
|
- linkchecker-
|
|
- julia-0.3.7.tar.gz
|
|
- jbossws-cxf-5.1.5.Final.zip
|
|
- wss4j-2.1.5-source-release.zip
|
|
- python-impacket-0.9.14-67fc19e.tar.gz
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
fedmsg_certs:
|
|
- service: shell
|
|
owner: root
|
|
group: sysadmin
|
|
can_send:
|
|
- git.branch
|
|
- git.mass_branch.complete
|
|
- git.mass_branch.start
|
|
- logger.log
|
|
- pagure.git.receive
|
|
- service: scm
|
|
owner: root
|
|
group: packager
|
|
can_send:
|
|
- git.receive
|
|
- pagure.git.receive
|
|
- service: lookaside
|
|
owner: root
|
|
group: apache
|
|
can_send:
|
|
- git.lookaside.new
|
|
- service: pagure
|
|
owner: pagure
|
|
group: apache
|
|
can_send:
|
|
- pagure.git.receive
|
|
- pagure.issue.assigned.added
|
|
- pagure.issue.assigned.reset
|
|
- pagure.issue.comment.added
|
|
- pagure.issue.dependency.added
|
|
- pagure.issue.dependency.removed
|
|
- pagure.issue.edit
|
|
- pagure.issue.new
|
|
- pagure.issue.tag.added
|
|
- pagure.issue.tag.removed
|
|
- pagure.project.edit
|
|
- pagure.project.forked
|
|
- pagure.project.group.added
|
|
- pagure.project.new
|
|
- pagure.project.tag.edited
|
|
- pagure.project.tag.removed
|
|
- pagure.project.user.added
|
|
- pagure.project.user.removed
|
|
- pagure.pull-request.closed
|
|
- pagure.pull-request.comment.added
|
|
- pagure.pull-request.comment.edited
|
|
- pagure.pull-request.flag.added
|
|
- pagure.pull-request.flag.updated
|
|
- pagure.pull-request.new
|
|
- pagure.request.assigned.added
|