mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-30 21:41:53 +08:00
5abc226b99
Add a batcave01 in rdu3. Note that any changes made to this host before the cutover may be wiped out by syncing content from the old one, so probibly you shouldn't use it yet. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
70 lines
1.9 KiB
Plaintext
70 lines
1.9 KiB
Plaintext
---
|
|
ansible_base: /srv/web/infra
|
|
# For the MOTD
|
|
# Neeed for rsync from log01 for logs.
|
|
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
|
|
nft_custom_rules:
|
|
- 'add rule ip filter INPUT ip saddr 10.3.163.39 tcp dport 873 counter accept'
|
|
- 'add rule ip filter INPUT ip saddr 192.168.1.59 tcp dport 873 counter accept'
|
|
#
|
|
# This host is externally reachable
|
|
#
|
|
external: true
|
|
freezes: true
|
|
ipa_client_shell_groups:
|
|
- fi-apprentice
|
|
- sysadmin-ask
|
|
- sysadmin-badges
|
|
- sysadmin-bot
|
|
- sysadmin-centos
|
|
- sysadmin-cloud
|
|
- sysadmin-copr
|
|
- sysadmin-coreos
|
|
- sysadmin-cvs
|
|
- sysadmin-datanommer
|
|
- sysadmin-debuginfod
|
|
- sysadmin-koschei
|
|
- sysadmin-libravatar
|
|
- sysadmin-messaging
|
|
- sysadmin-noc
|
|
- sysadmin-osbuild
|
|
- sysadmin-openscanhub
|
|
- sysadmin-qa
|
|
- sysadmin-retrace
|
|
- sysadmin-releasemonitoring
|
|
- sysadmin-releng
|
|
- sysadmin-tools
|
|
- sysadmin-upstreamfirst
|
|
- sysadmin-veteran
|
|
- sysadmin-web
|
|
ipa_host_group: batcave
|
|
ipa_host_group_desc: The Bat Cave
|
|
lvm_size: 850000
|
|
mem_size: 32768
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 16
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443, 8442, 8443]
|
|
vpn: true
|
|
nagios_Check_Services:
|
|
swap: false
|
|
|
|
notes: |
|
|
Central management host for ansible
|
|
|
|
From the batcave batman ventures out to fight crime and protect gotham city!
|
|
|
|
batcave is the central management host for ansible.
|
|
It also is the infrastructure.fedoraproject.org website with various content.
|
|
It houses a number of infrastructure git repos.
|
|
|
|
This host relies on:
|
|
* The virthost it's hosted on (virthost22)
|
|
|
|
Things that rely on this host:
|
|
* Things that access rhel/fedora/infra rpm repos, including builders and infra hosts.
|
|
* If this host is down, ansible runs cannot be made to update other hosts.
|
|
* If this host is down, crime may go up in gotham city.
|