---
# common items for the releng-* boxes
bodhi_message_queue_name: "bodhi{{ env_suffix }}_composer"
# Define the topics that our fedora-messaging queue should be subscribed to.
bodhi_message_routing_keys:
  - "org.fedoraproject.*.bodhi.composer.start"
# Make connections from signing bridges stateless, they break sigul connections
# https://bugzilla.redhat.com/show_bug.cgi?id=1283364
custom_rules: ['-A INPUT --proto tcp --sport 44334 --source 10.5.125.71 -j ACCEPT']
nft_custom_rules: ['add rule {{nft_table_filter}} INPUT ip saddr 10.5.125.71 tcp sport 44334 counter accept']
host_group: bodhi2
ipa_client_shell_groups:
  - sysadmin-bodhi
  - sysadmin-releng
ipa_client_sudo_groups:
  - sysadmin-bodhi
  - sysadmin-releng
ipa_host_group: bodhi
ipa_host_group_desc: Bodhi update service
lvm_size: 100000
mem_size: 16384
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
nrpe_procs_crit: 1000
# With 16 cpus, theres a bunch more kernel threads
nrpe_procs_warn: 900
num_cpus: 16
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
# Do not use testing repositories on production
testing: False
virt_install_command: "{{ virt_install_command_two_nic }}"