Files
fedora-infra_ansible/inventory/group_vars/pkgs
Kevin Fenzi fdc0368f12 pkgs01: use sshd_keyhelper here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-31 07:20:30 -07:00

103 lines
2.2 KiB
Plaintext

---
lvm_size: 500000
mem_size: 16384
max_mem_size: 32768
num_cpus: 8
tcp_ports: [ 80, 443 ]
# We have both celery (pagure_worker) and web thread wanting to send out fedmsg's.
# To make things easy on the listening side (so avoid contention of binding ports), let's set the pkgs boxes to active fedmsg.
fedmsg_active: True
# There vars are used to configure mod_wsgi
wsgi_procs: 6
wsgi_threads: 6
pagure_static_uid: 600
sshd_keyhelper: true
primary_auth_source: ipa
ipa_host_group: pkgs
ipa_client_shell_groups:
- packager
- sysadmin-cvs
- sysadmin-main
- sysadmin-noc
- sysadmin-veteran
ipa_client_sudo_groups:
- sysadmin-cvs
- sysadmin-main
clamscan_mailto: admin@fedoraproject.org
clamscan_paths:
- /srv/cache/lookaside/pkgs
clamscan_excludes:
- clamav-
- amavisd-new-2.3.3.tar.gz
- bro-20080804.tgz
- mailman-
- sagator-
- nicotine
- fwsnort-1.0.6.tar.gz
- psad-2.1.7.tar.bz2
- pymilter-
- linkchecker-
- julia-0.3.7.tar.gz
- jbossws-cxf-5.1.5.Final.zip
- wss4j-2.1.5-source-release.zip
- python-impacket-0.9.14-67fc19e.tar.gz
- gdk-pixbuf-
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
owner: root
group: sysadmin
can_send:
- git.branch
- git.mass_branch.complete
- git.mass_branch.start
- logger.log
- pagure.git.receive
- service: scm
owner: root
group: packager
can_send:
- git.receive
- pagure.git.receive
- service: lookaside
owner: root
group: apache
can_send:
- git.lookaside.new
- service: pagure
owner: pagure
group: apache
can_send:
- pagure.git.receive
- pagure.issue.assigned.added
- pagure.issue.assigned.reset
- pagure.issue.comment.added
- pagure.issue.dependency.added
- pagure.issue.dependency.removed
- pagure.issue.edit
- pagure.issue.new
- pagure.issue.tag.added
- pagure.issue.tag.removed
- pagure.project.edit
- pagure.project.forked
- pagure.project.group.added
- pagure.project.new
- pagure.project.tag.edited
- pagure.project.tag.removed
- pagure.project.user.added
- pagure.project.user.removed
- pagure.pull-request.closed
- pagure.pull-request.comment.added
- pagure.pull-request.comment.edited
- pagure.pull-request.flag.added
- pagure.pull-request.flag.updated
- pagure.pull-request.new
- pagure.request.assigned.added