---
env_prefix: stg.
env_suffix: .stg
env_short: stg
wildcard_cert_name: wildcard-2026.stg.fedoraproject.org
wildcard_int_file: wildcard-2026.stg.fedoraproject.org.intermediate.cert
freezes: false
ipa_client_shell_groups:
  - sysadmin-noc
  - sysadmin-web
  - sysadmin-veteran
ipa_client_sudo_groups:
  - sysadmin-web
ipa_host_group: pagure_stg_ro
ipa_host_group_desc: Pagure read only
lvm_size: 50000
mem_size: 8192
num_cpus: 4
postfix_group: vpn.pagure-stg
tcp_ports: [22, 25, 80, 443, 9418,
  # Used for the eventsource server
  8088]
vpn: true
# Pagure-stg has special needs for monitoring
zabbix_host: zabbix01.vpn.fedoraproject.org
zabbix_server: "{{ zabbix_hostname }}"
zabbix_auth_key: "{{ zabbix_apikey }}" # ansible-private repo
zabbix_tls_psk: "{{ zabbix_tls_prod_psk }}" # in ansible-private repo, pagure-stg is weird...

notes: |
  Run the pagure read only instances for fedora
  This host runs a read-only copy of the pagure forge