Rénich Bon Ćirić
de7ec8d165
- Use loop-specific owner/group variables for copying certificates in roles/koji_hub/tasks/main.yaml so group: apache is actually applied. - Update roles/koji_hub/templates/hub.conf.j2 to specify both slash-separated and RFC 2253 comma-separated formats in ProxyDNs. - Update roles/koji_hub/templates/web.conf.j2 to use KojiHubCA instead of serverca for the web config block. Co-developed-by: Gemini AI <renich+gemini@woralelandia.com> Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>
65 lines
No EOL
1.9 KiB
Django/Jinja
65 lines
No EOL
1.9 KiB
Django/Jinja
[hub]
|
|
|
|
## ConfigParser style config file, similar to ini files
|
|
## https://docs.python.org/library/configparser.html
|
|
|
|
## Basic options ##
|
|
DBName = {{ koji_db_name }}
|
|
DBUser = {{ koji_db_user }}
|
|
DBHost = {{ koji_db_host }}
|
|
DBPass = {{ koji_db_password }}
|
|
KojiDir = {{ koji_top_dir }}
|
|
AllowedSCMs = {{ koji_allowed_scms | default('git.mx-os.mx:/RPMs/*.git:*:use_common_checkout') }}
|
|
|
|
## Auth-related options ##
|
|
# CheckClientIP = True
|
|
|
|
## Kerberos authentication options ##
|
|
# ProxyPrincipals = koji/kojiweb@EXAMPLE.COM
|
|
# HostPrincipalFormat = compile/%s@EXAMPLE.COM
|
|
# AllowedKrbRealms = *
|
|
# DisableURLSessions = False
|
|
|
|
## SSL client certificate auth configuration ##
|
|
# The client username is the common name of the subject of their client certificate
|
|
DNUsernameComponent = CN
|
|
# ProxyDNs is used to allow a specific user (usually the web interface) to act as others
|
|
# This should match the DN of the 'kojiweb' certificate
|
|
ProxyDNs = /C={{ koji_cert_country }}/ST={{ koji_cert_state }}/L={{ koji_cert_locality }}/O={{ koji_cert_organization }}/CN={{ koji_hub_fqdn }} | CN={{ koji_hub_fqdn }},O={{ koji_cert_organization }},L={{ koji_cert_locality }},ST={{ koji_cert_state }},C={{ koji_cert_country }}
|
|
|
|
## Other options ##
|
|
LoginCreatesUser = On
|
|
KojiWebURL = {{ koji_url }}
|
|
EmailDomain = {{ koji_email_domain | default('mx-os.mx') }}
|
|
NotifyOnSuccess = False
|
|
NotifyOnFailure = False
|
|
DisableNotifications = False
|
|
|
|
## Resource limits ##
|
|
# RLIMIT_AS =
|
|
# RLIMIT_CORE =
|
|
# RLIMIT_CPU =
|
|
# RLIMIT_DATA =
|
|
# RLIMIT_FSIZE =
|
|
# RLIMIT_MEMLOCK =
|
|
# RLIMIT_NOFILE =
|
|
# RLIMIT_NPROC =
|
|
# RLIMIT_OFILE =
|
|
# RLIMIT_RSS =
|
|
# RLIMIT_STACK =
|
|
|
|
## MemoryWarnThreshold = 5000
|
|
## MaxRequestLength = 4194304
|
|
|
|
## Extended features
|
|
# EnableMaven = False
|
|
# EnableWin = False
|
|
|
|
## Koji hub plugins
|
|
PluginPath = /usr/lib/koji-hub-plugins
|
|
Plugins = echo sigul_sign
|
|
SigulServer = {{ sigul_server }}
|
|
|
|
## Debugging
|
|
KojiDebug = On
|
|
LogLevel = INFO |