mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-02-02 20:59:02 +08:00
163446f4dc
The IPA machines are currently not reachable through VPN. This is because they are missing firewall rules for VPN as they need to have vpn variable set to include them.
24 lines
779 B
Plaintext
24 lines
779 B
Plaintext
---
|
|
# Define resources for this group of hosts here.
|
|
custom_rules: ['-A INPUT -p udp -m udp -s 10.16.0.0/16 --dport 53 -j ACCEPT']
|
|
nft_custom_rules: ['add rule ip filter INPUT ip saddr 10.16.0.0/16 udp dport 53 counter accept']
|
|
host_backup_targets: ['/var/lib/ipa/backup', '/var/log/dirsrv/slapd-FEDORAPROJECT-ORG']
|
|
ipa_client_shell_groups:
|
|
- sysadmin-accounts
|
|
ipa_client_sudo_groups:
|
|
- sysadmin-accounts
|
|
ipa_dm_password: "{{ ipa_prod_dm_password }}"
|
|
ipa_host_group: ipa
|
|
ipa_host_group_desc: IPA service
|
|
ipa_initial: false
|
|
ipa_ldap_socket: ldapi://%2fvar%2frun%2fslapd-FEDORAPROJECT-ORG.socket
|
|
lvm_size: 50000
|
|
mem_size: 8192
|
|
nrpe_procs_crit: 500
|
|
nrpe_procs_warn: 300
|
|
num_cpus: 8
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 88, 389, 443, 464, 636]
|
|
udp_ports: [88, 464]
|
|
vpn: true
|