Files
fedora-infra_ansible/inventory/group_vars/secondary
Kevin Fenzi 8398aec029 basessh: enable internal sftp server globally.
In the past we only enabled sftp on servers where we needed it.
(ones using sshfs, ones that users might need to sftp to, etc).
However, now days the openssh scp client uses sftp, so we might as well
just enable it globally so people don't need to use 'scp -O' (which
has it use the old scp protocol, which will be removed someday).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-29 14:17:13 -07:00

26 lines
641 B
Plaintext

---
datacenter: iad2
host_group: secondary
ipa_client_shell_groups:
- alt-k12linux
- alt-sugar
- altvideos
- fi-apprentice
- hosted-content
- mips-content
- qa-deltaisos
- s390_content
- sysadmin-noc
- sysadmin-veteran
ipa_client_sudo_groups:
- sysadmin-noc
ipa_host_group: secondary
ipa_host_group_desc: Serve secondary arch and archived releases
# nfs mount options, overrides the all/default
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,actimeo=600,nfsvers=3"
nrpe_procs_crit: 1000
nrpe_procs_warn: 900
primary_auth_source: ipa
rsyncd_conf: "rsyncd.conf.download-{{ datacenter }}"
tcp_ports: [80, 443, 873]