94 lines
No EOL
2.7 KiB
YAML
94 lines
No EOL
2.7 KiB
YAML
---
|
|
# General Koji Settings
|
|
koji_build_tag: mxos0
|
|
koji_hub_fqdn: cs10-koji-00.mx-os
|
|
koji_admin_user: kojiadmin
|
|
koji_url: "https://{{ koji_hub_fqdn }}/koji"
|
|
koji_profile: koji
|
|
|
|
# Host FQDNs
|
|
kojid_fqdn: cs10-koji-03.mx-os
|
|
koji_db_host: cs10-koji-01.mx-os
|
|
koji_nfs_host: cs10-koji-02.mx-os
|
|
sigul_server: http://localhost:8080/sigul
|
|
|
|
# Paths & Directories
|
|
koji_top_dir: /mnt/koji
|
|
koji_pki_dir: "{{ playbook_dir }}/certs"
|
|
kojid_work_dir: /mnt/koji/work
|
|
koji_remote_pki_dir: /etc/pki/koji
|
|
koji_hub_config_dir: /etc/koji-hub/hub.conf.d
|
|
koji_web_config_dir: /etc/kojiweb
|
|
koji_client_config_file: /etc/koji.conf.d/ansible-settings.conf
|
|
koji_remote_kojira_conf_path: /etc/kojira/kojira.conf
|
|
koji_remote_kojihub_httpd_conf_path: /etc/httpd/conf.d/kojihub.conf
|
|
koji_remote_kojiweb_httpd_conf_path: /etc/httpd/conf.d/kojiweb.conf
|
|
|
|
# Certificate Paths (Remote)
|
|
koji_hub_cert_path: /etc/pki/koji/kojihub.crt
|
|
koji_hub_key_path: /etc/pki/koji/kojihub.key
|
|
koji_admin_cert_path: /etc/pki/koji/kojiadmin.pem
|
|
koji_admin_key_path: /etc/pki/koji/kojiadmin.key
|
|
kojid_crt_path: /etc/pki/koji/kojid.crt
|
|
kojid_key_path: /etc/pki/koji/kojid.key
|
|
kojid_pem_path: /etc/pki/koji/kojid.pem
|
|
kojira_cert_path: /etc/pki/koji/kojira.pem
|
|
koji_remote_ca_trust_path: /etc/pki/ca-trust/source/anchors/koji_ca.crt
|
|
|
|
# Certificate Settings
|
|
koji_ca_name: "koji_ca"
|
|
koji_cert_expiration_days: 3650 # 10 years
|
|
koji_cert_key_size: 4096
|
|
koji_cert_country: "MX"
|
|
koji_cert_state: "Mexico"
|
|
koji_cert_locality: "Mexico City"
|
|
koji_cert_organization: "MxOS"
|
|
koji_cert_organizational_unit: "Infraestructura"
|
|
|
|
# Certificate Generation List
|
|
koji_certs_to_generate:
|
|
- name: kojihub
|
|
cn: "{{ koji_hub_fqdn }}"
|
|
is_user: false
|
|
is_server: true
|
|
- name: kojiweb
|
|
cn: "{{ koji_hub_fqdn }}"
|
|
is_user: false
|
|
is_server: true
|
|
- name: kojira
|
|
cn: kojira
|
|
is_user: false
|
|
- name: kojid
|
|
cn: "{{ kojid_fqdn }}"
|
|
is_user: false
|
|
- name: kojiadmin
|
|
cn: kojiadmin
|
|
is_user: true
|
|
- name: postgresql
|
|
cn: "{{ koji_db_host }}"
|
|
is_user: false
|
|
is_server: true
|
|
|
|
# File Permissions
|
|
koji_pki_dir_mode: "0755"
|
|
koji_pki_file_mode: "0644"
|
|
koji_pki_private_key_mode: "0600"
|
|
koji_client_dir_mode: "0700"
|
|
koji_client_file_mode: "0600"
|
|
|
|
# Kojid Specific Settings
|
|
kojid_max_jobs: 2
|
|
kojid_mock_user: kojid
|
|
kojid_vendor: Fundación MxOS
|
|
kojid_packager: Koji
|
|
kojid_distribution: MxOS
|
|
kojid_allowed_scms: git.mx-os.mx:/MxOS/rpms/*
|
|
kojid_allowed_scms_use_config: true
|
|
kojid_allowed_scms_use_policy: false
|
|
kojid_smtp_host: mail.mx-os.mx
|
|
kojid_smtp_user: kojid@cs10-koji-03.mx-os
|
|
kojid_from_addr: Koji Build System <kojid@cs10-koji-03.mx-os>
|
|
|
|
# HTTPD/Web Paths
|
|
httpd_ssl_config_file: /etc/httpd/conf.d/ssl.conf
|
|
koji_hub_httpd_config_file: /etc/httpd/conf.d/kojihub.conf |