blob: e0931528c2877c8c7a4d5ab4e23fec971a85e447 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
---
fas_client_groups: retrace
freezes: false
sudoers: "{{ private }}/files/sudo/arm-retrace-sudoers"
ansible_ifcfg_blacklist: true
tcp_ports: [ 80, 443 ]
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 2049 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 5432 -j ACCEPT' ]
nrpe_procs_warn: 1800
nrpe_procs_crit: 2000
devel: false
# Since retrace is on the qa network, it needs to actively connect to our
# inbound relay.
fedmsg_active: True
fedmsg_cert_prefix: faf
# Declare fedmsg certs that should be put in /etc/pki/fedmsg/
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
owner: root
group: retrace
can_send:
- logger.log
- service: faf
owner: root
group: faf
can_send:
- faf.report.threshold1
- faf.report.threshold10
- faf.report.threshold100
- faf.report.threshold1000
- faf.report.threshold1000
- faf.report.threshold10000
- faf.report.threshold100000
- faf.report.threshold1000000
- faf.problem.threshold1
- faf.problem.threshold10
- faf.problem.threshold100
- faf.problem.threshold1000
- faf.problem.threshold1000
- faf.problem.threshold10000
- faf.problem.threshold100000
- faf.problem.threshold1000000
|
