- f32-test.fedorainfracloud.org

- host_group: cloud

- ansible_ifcfg_blocklist: true

- 

- # Path to the openshift-ansible checkout as external git repo brought into

- # Fedora Infra

- openshift_ansible: /srv/web/infra/openshift-ansible/

- 

- #

- # END: Ansible roles_path variables

- #######

- 

- freezes: true

- # most of our systems are in IAD2

- datacenter: iad2

- preferred_dc: iad2

- postfix_group: "none"

- 

- # usually we do not want to enable nested virt, only on some virthosts

- nested: false

- 

- # most of our systems are 64bit.

- # Used to install various nagios scripts and the like.

- libdir: /usr/lib64

- 

- # Most EL systems need default EPEL repos.

- # Some systems (notably fed-cloud*) need to get their own

- # EPEL files because EPEL overrides packages in their core repos.

- use_default_epel: true

- 

- # example of ports for default iptables

- # tcp_ports: [ 22, 80, 443 ]

- # udp_ports: [ 110, 1024, 2049 ]

- # multiple lines can be handled as below

- # custom_rules: [ '-A INPUT -p tcp -m tcp --dport 8888 -j ACCEPT',

- #                  '-A INPUT -p tcp -m tcp --dport 8889 -j ACCEPT' ]

- # We default these to empty

- udp_ports: []

- tcp_ports: []

- custom_rules: []

- nat_rules: []

- custom6_rules: []

- 

- # defaults for hw installs

- install_noc: none

- 

- # defaults for virt installs

- ks_url: http://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-rhel-7

- ks_repo: http://infrastructure.fedoraproject.org/repo/rhel/RHEL7-x86_64/

- mem_size: 4096

- num_cpus: 2

- lvm_size: 20000

- 

- # on MOST infra systems, the interface connected to the infra network

- # is eth0. but not on quite ALL systems. e.g. on s390 boxes it's enc900,

- # on openqa-ppc64le-01.qa it's eth2 for some reason, and on qa01.qa and

- # qa02.qa it's em3. currently this only affects whether GATEWAY, DOMAIN

- # and DNS1/DNS2 lines are put into ifcfg-(device).

- ansible_ifcfg_infra_net_devices: [ 'eth0', 'enc900' ]

- 

- # Default netmask. All of our iad2 nets are /24's. Almost all of our

- # non-iad2 sites are less than a /24.

- eth0_nm: 255.255.255.0

- eth1_nm: 255.255.255.0

- eth1_ip: 10.0.0.10

- br0_nm: 255.255.255.0

- br1_nm: 255.255.255.0

- nm: 255.255.255.0

- 

- # The default virt-install works for rhel7 or fedora with 1 nic

- virt_install_command: "{{ virt_install_command_one_nic }}"

- 

- main_bridge: br0

- nfs_bridge: br1

- mac_address: RANDOM

- mac_address1: RANDOM

- 

- 

- virt_install_command_pxe_rhcos: virt-install -n {{ inventory_hostname }}

-   --vcpus {{ num_cpus }},maxvcpus={{ num_cpus }}

-   --cpu host

-   --memory  {{ mem_size }}

-   --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-   --nographics

-   --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-   --hvm --accelerate

-   --autostart --wait=-1

-   --extra-args "ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:ens2:none hostname={{ inventory_hostname }} nameserver={{ dns }} console=ttyS0 nomodeset rd.neednet=1 coreos.inst=yes coreos.inst.install_dev=vda coreos.live.rootfs_url={{ rhcos_install_rootfs_url }} coreos.inst.ignition_url={{ rhcos_ignition_file_url }}"

-   --os-variant rhel7

-   --location  {{ rhcos_install_url }}

- 

- 

- virt_install_command_one_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ipv4 }}::{{ eth0_ipv4_gw }}:{{ eth0_ipv4_nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random --cpu host

- 

- virt_install_command_two_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none

-                   ip={{ eth1_ip }}:::{{ nm }}:{{ inventory_hostname_short }}-nfs:eth1:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --network=bridge={{ nfs_bridge }},model=virtio,mac={{ mac_address1 }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random

- 

- virt_install_command_one_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns1 }}

-                   ip={{ eth0_ipv4 }}::{{ eth0_ipv4_gw }}:{{ eth0_ipv4_nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random --cpu host

- 

- virt_install_command_two_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth1_ip }}:::{{ nm }}:{{ inventory_hostname_short }}-nfs:eth1:none

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --network bridge={{ nfs_bridge }},model=virtio,mac={{ mac_address1 }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random

- 

- virt_install_command_ppc64le_one_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random

- 

- virt_install_command_ppc64le_two_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none

-                   ip={{ eth1_ip }}:::{{ nm }}:{{ inventory_hostname_short }}-nfs:eth1:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --network=bridge={{ nfs_bridge }},model=virtio,mac={{ mac_address1 }}

-                  --autostart --noautoconsole --watchdog default --rng /dev/random

- 

- virt_install_command_aarch64_one_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole

- 

- virt_install_command_aarch64_one_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole

- 

- virt_install_command_aarch64_2nd_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ nfs_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole

- 

- virt_install_command_aarch64_two_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none

-                   ip={{ eth1_ip }}:::{{ nm }}:{{ inventory_hostname_short }}-nfs:eth1:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --network=bridge={{ nfs_bridge }},model=virtio,mac={{ mac_address1 }}

-                  --autostart --noautoconsole --rng /dev/random

- 

- virt_install_command_armv7_one_nic: virt-install -n {{ inventory_hostname }} --arch armv7l

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyAMA0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }}

-                  --autostart --noautoconsole --rng /dev/random

- 

- virt_install_command_armv7_one_nic_unsafe: virt-install -n {{ inventory_hostname }} --arch armv7l

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }} console=tty0 console=ttyAMA0

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }}

-                  --autostart --noautoconsole --rng /dev/random --qemu-commandline="-machine highmem=off"

- 

- virt_install_command_s390x_one_nic: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole --rng /dev/random --cpu host

- 

- virt_install_command_s390x_one_nic_unsafe: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }} --memballoon virtio

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }},cache=unsafe,io=threads

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  'net.ifnames=0 inst.ksdevice=eth0 inst.ks={{ ks_url }}

-                   hostname={{ inventory_hostname }} nameserver={{ dns }}

-                   ip={{ eth0_ip }}::{{ gw }}:{{ nm }}:{{ inventory_hostname }}:eth0:none'

-                  --network bridge={{ main_bridge }},model=virtio,mac={{ mac_address }}

-                  --autostart --noautoconsole --rng /dev/random --cpu host

- 

- virt_install_command_rhel6: virt-install -n {{ inventory_hostname }}

-                  --memory={{ mem_size }},maxmemory={{ max_mem_size }}

-                  --disk bus=virtio,path={{ volgroup }}/{{ inventory_hostname }}

-                  --vcpus={{ num_cpus }},maxvcpus={{ max_cpu }} -l {{ ks_repo }} -x

-                  "inst.ksdevice=eth0 inst.ks={{ ks_url }} ip={{ eth0_ip }} netmask={{ nm }}

-                   gateway={{ gw }} dns={{ dns }} console=tty0 console=ttyS0

-                   hostname={{ inventory_hostname }}"

-                  --network=bridge=br0 --autostart --noautoconsole --watchdog default

- 

- max_mem_size: "{{ mem_size * 5 }}"

- max_cpu: "{{ num_cpus * 5 }}"

- 

- # This is the wildcard certname for our proxies.  It has a different name for

- # the staging group and is used in the proxies.yml playbook.

- wildcard_cert_name: wildcard-2020.fedoraproject.org

- wildcard_crt_file: wildcard-2020.fedoraproject.org.cert

- wildcard_key_file: wildcard-2020.fedoraproject.org.key

- wildcard_int_file: wildcard-2020.fedoraproject.org.intermediate.cert

- 

- # This is the openshift wildcard cert. Until it exists set it equal to wildcard

- os_wildcard_cert_name: wildcard-2021.app.os.fedoraproject.org

- os_wildcard_crt_file: wildcard-2021.app.os.fedoraproject.org.cert

- os_wildcard_key_file: wildcard-2021.app.os.fedoraproject.org.key

- os_wildcard_int_file: wildcard-2021.app.os.fedoraproject.org.intermediate.cert

- 

- # This is the openshift wildcard cert for ocp

- ocp_wildcard_cert_name: wildcard-2021.apps.ocp.fedoraproject.org

- ocp_wildcard_cert_file: wildcard-2021.apps.ocp.fedoraproject.org.cert

- ocp_wildcard_key_file: wildcard-2021.apps.ocp.fedoraproject.org.key

- ocp_wildcard_int_file: wildcard-2021.apps.ocp.fedoraproject.org.intermediate.cert

- 

- # This is the mirrors.centos.org certs

- mirrors_centos_org_cert_name: mirrors.centos.org

- mirrors_centos_org_cert_file: mirrors.centos.org.cert

- mirrors_centos_org_key_file: mirrors.centos.org.key

- 

- # Everywhere, always, we should sign messages and validate signatures.

- # However, we allow individual hosts and groups to override this.  Use this very

- # carefully.. and never in production (good for testing stuff in staging).

- fedmsg_sign_messages: True

- fedmsg_validate_signatures: True

- 

- # By default, nodes get no fedmsg certs.  They need to declare them explicitly.

- fedmsg_certs: []

- 

- # By default, fedmsg should not log debug info.  Groups can override this.

- fedmsg_loglevel: INFO

- 

- # By default, fedmsg sends error logs to sysadmin-datanommer-members@fp.o.

- fedmsg_error_recipients:

- - sysadmin-datanommer-members@fedoraproject.org

- 

- # By default, fedmsg hosts are in passive mode.  External hosts are typically

- # active.

- fedmsg_active: False

- 

- # Other defaults for fedmsg environments

- fedmsg_prefix: org.fedoraproject

- fedmsg_env: prod

- 

- # Amount of time to wait for connections after a socket is first established.

- fedmsg_post_init_sleep: 1.0

- 

- # A special flag that, when set to true, will disconnect the host from the

- # global fedmsg-relay instance and set it up with its own local one.  You can

- # temporarily set this to true for a specific host to do some debugging -- so

- # you can *replay real messages from the datagrepper history without having

- # those broadcast to the rest of the bus*.

- fedmsg_debug_loopback: False

- 

- # by default the number of procs we allow before we whine

- nrpe_procs_warn: 250

- nrpe_procs_crit: 300

- 

- # by default, the number of emails in queue before we whine

- nrpe_check_postfix_queue_warn: 2

- nrpe_check_postfix_queue_crit: 5

- 

- env_suffix: ""

- 

- # nfs mount options, override at the group/host level

- nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"

- 

- # by default set become to false here We can override it as needed.

- # Note that if become is true, you need to unset requiretty for

- # ssh controlpersist to work.

- become: false

- 

- # default the root_auth_users to nothing.

- # This should be set for cloud instances in their host or group vars.

- root_auth_users: ''

- 

- # This vars get shoved into /etc/system_identification by the base role.

- # Groups and individual hosts should override them with specific info.

- # See http://infrastructure.fedoraproject.org/csi/security-policy/

- csi_security_category: Unspecified

- csi_primary_contact: Fedora Admins - admin@fedoraproject.org

- csi_purpose: Unspecified

- csi_relationship: |

-     Unspecified.

-     * What hosts/services does this rely on?

-     * What hosts/services rely on this?

- 

-     To update this text, add the csi_* vars to group_vars/ in ansible.

- 

- #

- # say if we want the apache role dependency for mod_wsgi or not

- # In some cases we want mod_wsgi and no apache (for python3 httpaio stuff)

- wsgi_wants_apache: true

- 

- # IPA settings

- additional_host_keytabs: []

- ipa_realm: FEDORAPROJECT.ORG

- ipa_admin_password: "{{ ipa_prod_admin_password }}"

- primary_auth_source: ipa

- 

- # Normal default sshd port is 22

- sshd_port: 22

- # This enables/disables the SSH "keyhelper" used by Pagure for verifying users'

- # SSH keys from the Pagure database

- sshd_keyhelper: false

- 

- # List of names under which the host is available

- ssh_hostnames: []

- 

- # assume collectd apache

- collectd_apache: true

- 

- # assume vpn is false

- vpn: False

- 

- # assume createrepo is true and this builder has the koji nfs mount to do that

- createrepo: True

- 

-   mail: true

-   nrpe: true

-   sshd: true

-   named: false

-   swap: true

- 

- nagios_Can_Connect: true

- 

- # Set variable if we want to use our global iptables defaults

- # Some things need to set their own.

- baseiptables: True

- 

- dns1: "10.3.163.33"

- dns2: "10.3.163.34"

- 

- 

- # true or false if we are or are not a copr build virthost.

- # Default to false

- copr_build_virthost: false

- 

- 

- 

- # Autodetect python version

- ansible_python_interpreter: auto

- 

- 

- # ocp4 is only set true in some proxy roles

- ocp4: false

- lvm_size: 30000

- mem_size: 2048

- num_cpus: 2

- 

- 

- ansible_ifcfg_allowlist:

- - eth0

- - eth1

- 

- ipa_host_group: autosign

- ipa_host_group_desc: Hosts signing content automatically

- - sysadmin-releng

- - sysadmin-releng

- 

- fedmsg_error_recipients: []

- 

- 

- # For the MOTD

- csi_security_category: High

- csi_primary_contact: Release Engineering - rel-eng@lists.fedoraproject.org

- csi_purpose: Automatically sign Rawhide and Branched packages

- csi_relationship: |

-     This host will run the robosignatory application which should automatically sign

-     builds.  It listens to koji over fedora-messaging for notifications of new builds,

-     and then asks sigul, the signing server, to sign the rpms and store the new rpm

-     header back in Koji.

- 

- 

- primary_auth_source: ipa

- ipa_host_group: badges

- ipa_host_group_desc: Hosts running the Badges application

- - sysadmin-badges

- - sysadmin-noc

- - sysadmin-veteran

- - sysadmin-badges

- freezes: false

- 

- 

- tcp_ports: [ 3000, 3001, 3002, 3003,

-              3004, 3005, 3006, 3007 ]

- 

- 

- # These people get told when something goes wrong.

- fedmsg_error_recipients:

- - sysadmin-badges-members@fedoraproject.org

- 

- fedmsg_hub_auto_restart: True

- fedmsg_hub_memory_limit_mb: "{{ (mem_size / 2) | int }}"

- 

- # These are consumed by a task in roles/fedmsg/base/main.yml

- fedmsg_certs:

- - service: shell

-   owner: root

-   group: sysadmin

-   can_send:

-   - logger.log

- - service: fedbadges

-   owner: root

-   group: fedmsg

-   can_send: