forked from infra/ansible
30 lines
1.1 KiB
Text
30 lines
1.1 KiB
Text
---
|
|
custom_rules:
|
|
- '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 2049 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 10.5.78.11 --dport 5432 -j ACCEPT'
|
|
nft_custom_rules:
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 10.5.78.11 tcp dport 2049 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 10.5.78.11 tcp dport 5432 counter accept'
|
|
env: production
|
|
freezes: false
|
|
ipa_client_shell_groups:
|
|
- retrace
|
|
ipa_client_sudo_groups:
|
|
- retrace
|
|
ipa_host_group: retrace
|
|
ipa_host_group_desc: Retrace servers
|
|
nrpe_procs_crit: 2000
|
|
nrpe_procs_warn: 1800
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443]
|
|
vpn: true
|
|
host_group: retrace
|
|
|
|
notes: |
|
|
Provide a web interface and backend for ABRT Analytics and Retrace Server.
|
|
Three services run on this server:
|
|
* An Apache httpd serves the web interface and backed functionality for ABRT Analytics.
|
|
* The same server provides the HTTP endpoints for Retrace Server to allow remote retracing of crashes in Fedora.
|
|
* PostgreSQL server for ABRT Analytics.
|
|
|
|
The retracing functionality relies on the debuginfod server (debuginfod.fedoraproject.org).
|