mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-03 20:31:44 +08:00
62 lines
1.9 KiB
Plaintext
62 lines
1.9 KiB
Plaintext
---
|
|
csi_primary_contact: "msrb, abrt-devel-list@redhat.com, Libera.chat #abrt"
|
|
csi_purpose: Provide a web interface and backend for ABRT Analytics and Retrace Server.
|
|
csi_relationship: |
|
|
Three services run on this server:
|
|
- An Apache httpd serves the web interface and backed functionality for
|
|
ABRT Analytics.
|
|
- The same server provides the HTTP endpoints for Retrace Server to allow
|
|
remote retracing of crashes in Fedora.
|
|
- PostgreSQL server for ABRT Analytics.
|
|
|
|
The retracing functionality relies on the debuginfod server
|
|
(debuginfod.fedoraproject.org).
|
|
custom_rules:
|
|
- '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 2049 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 5432 -j ACCEPT'
|
|
env: production
|
|
# Since retrace is on the qa network, it needs to actively connect to our
|
|
# inbound relay.
|
|
fedmsg_active: True
|
|
fedmsg_cert_prefix: faf
|
|
# Declare fedmsg certs that should be put in /etc/pki/fedmsg/
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
fedmsg_certs:
|
|
- can_send:
|
|
- logger.log
|
|
group: retrace
|
|
owner: root
|
|
service: shell
|
|
- can_send:
|
|
- faf.report.threshold1
|
|
- faf.report.threshold10
|
|
- faf.report.threshold100
|
|
- faf.report.threshold1000
|
|
- faf.report.threshold1000
|
|
- faf.report.threshold10000
|
|
- faf.report.threshold100000
|
|
- faf.report.threshold1000000
|
|
- faf.problem.threshold1
|
|
- faf.problem.threshold10
|
|
- faf.problem.threshold100
|
|
- faf.problem.threshold1000
|
|
- faf.problem.threshold1000
|
|
- faf.problem.threshold10000
|
|
- faf.problem.threshold100000
|
|
- faf.problem.threshold1000000
|
|
group: faf
|
|
owner: root
|
|
service: faf
|
|
freezes: false
|
|
ipa_client_shell_groups:
|
|
- retrace
|
|
ipa_client_sudo_groups:
|
|
- retrace
|
|
ipa_host_group: retrace
|
|
ipa_host_group_desc: Retrace servers
|
|
nrpe_procs_crit: 2000
|
|
nrpe_procs_warn: 1800
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443]
|
|
vpn: true
|