mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-02-02 20:59:02 +08:00
74 lines
2.2 KiB
Plaintext
74 lines
2.2 KiB
Plaintext
---
|
|
ansible_base: /srv/web/infra
|
|
# For the MOTD
|
|
# Neeed for rsync from log01 for logs.
|
|
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.16.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
|
|
nft_custom_rules:
|
|
- 'add rule ip filter INPUT ip saddr 10.16.163.39 tcp dport 873 counter accept'
|
|
- 'add rule ip filter INPUT ip saddr 192.168.1.59 tcp dport 873 counter accept'
|
|
#
|
|
# This host is externally reachable
|
|
#
|
|
external: true
|
|
freezes: true
|
|
ipa_client_shell_groups:
|
|
- fi-apprentice
|
|
- sysadmin-ask
|
|
- sysadmin-badges
|
|
- sysadmin-bot
|
|
- sysadmin-centos
|
|
- sysadmin-cloud
|
|
- sysadmin-copr
|
|
- sysadmin-coreos
|
|
- sysadmin-cvs
|
|
- sysadmin-datanommer
|
|
- sysadmin-debuginfod
|
|
- sysadmin-epel
|
|
- sysadmin-koschei
|
|
- sysadmin-libravatar
|
|
- sysadmin-messaging
|
|
- sysadmin-noc
|
|
- sysadmin-osbuild
|
|
- sysadmin-openscanhub
|
|
- sysadmin-qa
|
|
- sysadmin-retrace
|
|
- sysadmin-releasemonitoring
|
|
- sysadmin-releng
|
|
- sysadmin-tools
|
|
- sysadmin-upstreamfirst
|
|
- sysadmin-veteran
|
|
- sysadmin-web
|
|
ipa_host_group: batcave
|
|
ipa_host_group_desc: The Bat Cave
|
|
lvm_size: 850000
|
|
mem_size: 32768
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 16
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443, 8442, 8443]
|
|
vpn: true
|
|
nagios_Check_Services:
|
|
swap: false
|
|
zabbix_macros:
|
|
'APACHE.STATUS.PORT': 443 # Proxies appear to ignore port 80 for apache-status
|
|
'APACHE.STATUS.SCHEME': https # but https://localhost seems to work instead
|
|
|
|
notes: |
|
|
Central management host for ansible
|
|
|
|
From the batcave batman ventures out to fight crime and protect gotham city!
|
|
|
|
batcave is the central management host for ansible.
|
|
It also is the infrastructure.fedoraproject.org website with various content.
|
|
It houses a number of infrastructure git repos.
|
|
|
|
This host relies on:
|
|
* The virthost it's hosted on (vmhost-x86-01.rdu3.fedoraproject.org)
|
|
|
|
Things that rely on this host:
|
|
* Things that access rhel/fedora/infra rpm repos, including builders and infra hosts.
|
|
* If this host is down, ansible runs cannot be made to update other hosts.
|
|
* If this host is down, crime may go up in gotham city.
|