Files
fedora-infra_ansible/inventory/group_vars/rabbitmq
Nils Philippsen c901eae7ae rabbitmq: Fix typo making sudo groups ineffective
This amends commit dbbf94a411.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-07-23 19:25:32 +02:00

31 lines
1.1 KiB
Plaintext

---
custom_rules: [
# Neeed for rsync from log01 for logs.
'-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
# Inter-node traffic
'-A INPUT -p tcp -m tcp -s 10.3.163.78 --dport 25672 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.79 --dport 25672 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.80 --dport 25672 -j ACCEPT']
ipa_host_group: rabbitmq
ipa_host_group_desc: RabbitMQ service
ipa_shell_groups:
- sysadmin-messaging
ipa_client_sudo_groups:
- sysadmin-messaging
mem_size: 8192
primary_auth_source: ipa
tcp_ports: [
# https://www.rabbitmq.com/clustering.html#selinux-ports
# EPMD
4369,
# AMQP
5672, 5671,
# CLI tools
35672, 35673, 35674, 35675, 35676, 35677, 35678, 35679, 35680, 35681, 35682,
# HTTP API
#15672,
]
zabbix_templates:
- group: "rabbitmq" # Ansible group
template: "RabbitMQ node by Zabbix agent" # Template name in roles/zabbix/zabbix_templates/files/templatename.json
custom_template: false # Is the template official template bundled with Zabbix or one of our custom templates
hostgroup: "fedora rabbitmq" # Zabbix hostgroup