---
# General Koji Settings
koji_build_tag: mxos0
koji_hub_fqdn: cs10-koji-00.mx-os
koji_admin_user: kojiadmin
koji_url: "https://{{ koji_hub_fqdn }}/koji"
koji_profile: koji

# Host FQDNs
kojid_fqdn: cs10-koji-03.mx-os
koji_db_host: cs10-koji-01.mx-os
koji_nfs_host: cs10-koji-02.mx-os
sigul_server: http://localhost:8080/sigul

# Paths & Directories
koji_top_dir: /mnt/koji
koji_pki_dir: "{{ playbook_dir }}/certs"
kojid_work_dir: /mnt/koji/work
koji_remote_pki_dir: /etc/pki/koji
koji_hub_config_dir: /etc/koji-hub/hub.conf.d
koji_web_config_dir: /etc/kojiweb
koji_client_config_file: /etc/koji.conf.d/ansible-settings.conf
koji_remote_kojira_conf_path: /etc/kojira/kojira.conf
koji_remote_kojihub_httpd_conf_path: /etc/httpd/conf.d/kojihub.conf
koji_remote_kojiweb_httpd_conf_path: /etc/httpd/conf.d/kojiweb.conf

# Certificate Paths (Remote)
koji_hub_cert_path: /etc/pki/koji/kojihub.crt
koji_hub_key_path: /etc/pki/koji/kojihub.key
koji_admin_cert_path: /etc/pki/koji/kojiadmin.pem
koji_admin_key_path: /etc/pki/koji/kojiadmin.key
kojid_crt_path: /etc/pki/koji/kojid.crt
kojid_key_path: /etc/pki/koji/kojid.key
kojid_pem_path: /etc/pki/koji/kojid.pem
kojira_cert_path: /etc/pki/koji/kojira.pem
koji_remote_ca_trust_path: /etc/pki/ca-trust/source/anchors/koji_ca.crt

# Certificate Settings
koji_ca_name: "koji_ca"
koji_cert_expiration_days: 3650 # 10 years
koji_cert_key_size: 4096
koji_cert_country: "MX"
koji_cert_state: "Mexico"
koji_cert_locality: "Mexico City"
koji_cert_organization: "MxOS"
koji_cert_organizational_unit: "Infraestructura"

# Certificate Generation List
koji_certs_to_generate:
  - name: kojihub
    cn: "{{ koji_hub_fqdn }}"
    is_user: false
    is_server: true
  - name: kojiweb
    cn: "{{ koji_hub_fqdn }}"
    is_user: false
    is_server: true
  - name: kojira
    cn: kojira
    is_user: false
  - name: kojid
    cn: "{{ kojid_fqdn }}"
    is_user: false
  - name: kojiadmin
    cn: kojiadmin
    is_user: true
  - name: postgresql
    cn: "{{ koji_db_host }}"
    is_user: false
    is_server: true

# File Permissions
koji_pki_dir_mode: "0755"
koji_pki_file_mode: "0644"
koji_pki_private_key_mode: "0600"
koji_client_dir_mode: "0700"
koji_client_file_mode: "0600"

# Kojid Specific Settings
kojid_max_jobs: 2
kojid_mock_user: kojid
kojid_vendor: Fundación MxOS
kojid_packager: Koji
kojid_distribution: MxOS
kojid_allowed_scms: git.mx-os.mx:/MxOS/rpms/*
kojid_allowed_scms_use_config: true
kojid_allowed_scms_use_policy: false
kojid_smtp_host: mail.mx-os.mx
kojid_smtp_user: kojid@cs10-koji-03.mx-os
kojid_from_addr: Koji Build System <kojid@cs10-koji-03.mx-os>

# HTTPD/Web Paths
httpd_ssl_config_file: /etc/httpd/conf.d/ssl.conf
koji_hub_httpd_config_file: /etc/httpd/conf.d/kojihub.conf