Page Menu
Home
Software Heritage
Search
Configure Global Search
Log In
Files
F9123811
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Size
84 KB
Subscribers
None
View Options
diff --git a/data/defaults.yaml b/data/defaults.yaml
index d3c27eaf..16a0834a 100644
--- a/data/defaults.yaml
+++ b/data/defaults.yaml
@@ -1,2159 +1,2161 @@
---
dns::local_cache: true
dns::nameservers:
- 127.0.0.1
dns::search_domains:
- internal.softwareheritage.org
- softwareheritage.org
dns::forward_zones:
'internal.softwareheritage.org.':
- 192.168.100.29
'100.168.192.in-addr.arpa.':
- 192.168.100.29
'101.168.192.in-addr.arpa.':
- 192.168.100.29
# dns::forwarders per-location. No Default value
# ntp::servers per-location. Default value:
ntp::servers:
- 0.debian.pool.ntp.org
- 1.debian.pool.ntp.org
- 2.debian.pool.ntp.org
- 3.debian.pool.ntp.org
# smtp::relayhost is per-location. Default value:
smtp::relayhost: '[pergamon.internal.softwareheritage.org]'
smtp::mydestination:
- "%{::fqdn}"
smtp::mynetworks:
- 127.0.0.0/8
- "[::ffff:127.0.0.0]/104"
- "[::1]/128"
smtp::relay_destinations: {}
smtp::virtual_aliases: {}
smtp::mail_aliases:
ardumont:
- antoine.romain.dumont@gmail.com
fiendish:
- patcherton.fixesthings@gmail.com
olasd:
- nicolas+swhinfra@dandrimont.eu
morane:
- morane.gg@gmail.com
postgres:
- root
rdicosmo:
- roberto@dicosmo.org
root:
- olasd
- zack
- ardumont
seirl:
- antoine.pietri1@gmail.com
swhstorage:
- root
swhworker:
- zack
- olasd
- ardumont
zack:
- zack@upsilon.cc
locales::default_locale: C.UTF-8
locales::installed_locales:
- C.UTF-8 UTF-8
- en_US.UTF-8 UTF-8
- fr_FR.UTF-8 UTF-8
- it_IT.UTF-8 UTF-8
packages:
- etckeeper
- git
- htop
- molly-guard
- moreutils
- ncdu
- python3
- strace
- tmux
- vim
- zsh
packages::desktop:
- autojump
- chromium
- curl
- emacs
- ethtool
- gnome
- i3
- ii
- libx11-dev
- mosh
- myrepos
- net-tools
- ruby-dev
- rxvt-unicode-256color
- screen
- scrot
- tcpdump
- tree
- vim-nox
- weechat
- weechat-scripts
packages::devel:
- arcanist
- elpa-magit
- git-email
- gitg
- gitk
- ltrace
- perl-doc
packages::devel::debian:
- devscripts
- dpkg-dev
- reprepro
- sbuild
packages::devel::python:
- graphviz
- make
- python3-arrow
- python3-azure-storage
- python3-blinker
- python3-celery
- python3-cffi
- python3-click
- python3-dateutil
- python3-dev
- python3-dulwich
- python3-flake8
- python3-flask
- python3-flask-api
- python3-flask-limiter
- python3-flask-testing
- python3-libcloud
- python3-msgpack
- python3-nose
- python3-psycopg2
- python3-pygit2
- python3-requests
- python3-retrying
- python3-sphinx
- python3-subvertpy
- python3-vcversioner
- python3-venv
- python3-wheel
packages::devel::broker:
- rabbitmq-server
packages::devel::postgres:
- apgdiff
- barman
- check-postgres
- libpq-dev
- postgresql
- postgresql-autodoc
- postgresql-client
- postgresql-contrib
- postgresql-doc
- postgresql-plpython3-9.6
users:
root:
uid: 0
full_name:
shell: /bin/bash
groups: []
authorized_keys:
root@louvre:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDMLEWHlUQldlvZs5rg0y42lRNAfOhD+6pmO8a73DzpJWHTqvAlfteLpU78IPjSacB4dO5ish1E/1RX/HC+Bt8p2v4RBqbCnVLx2w+Hx4ahWu6qbeTVmTz+U++1SQrHnL08fSlhT0OekCw0lRZM2sQq21FZi6+vul97Ecikag4Xaw6Qfumylu94pM3t05uzTUlKk1+6VMCjhT8dlSe8VS8OirVQpE/OqYtTMAWtQaMXGHPCsqDdYRAKzkJ8GjH7ydZmX5VCRyqS0RvPKAlcJfLCs5HBtv0u5rbeGtiHhuzhj/j3YgS/6NJOC2mUfcetcDOMPLnhkKpnF0vUAzTsJ7aR
zack:
uid: 1000
full_name: Stefano Zacchiroli
shell: /usr/bin/zsh
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
zack-software-heritage:
type: ssh-rsa
key: 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
olasd:
uid: 1001
full_name: Nicolas Dandrimont
shell: /bin/bash
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
nicolasd@darboux:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ1TCpfzrvxLhEMhxjbxqPDCwY0nazIr1cyIbhGD2bUdAbZqVMdNtr7MeDnlLIKrIPJWuvltauvLNkYU0iLc1jMntdBCBM3hgXjmTyDtc8XvXseeBp5tDqccYNR/cnDUuweNcL5tfeu5kzaAg3DFi5Dsncs5hQK5KQ8CPKWcacPjEk4ir9gdFrtKG1rZmg/wi7YbfxrJYWzb171hdV13gSgyXdsG5UAFsNyxsKSztulcLKxvbmDgYbzytr38FK2udRk7WuqPbtEAW1zV4yrBXBSB/uw8EAMi+wwvLTwyUcEl4u0CTlhREljUx8LhYrsQUCrBcmoPAmlnLCD5Q9XrGH
ardumont:
uid: 1003
full_name: Antoine R. Dumont
shell: /usr/bin/zsh
groups:
- adm
- swhdev
- swhstorage
- swhscheduler
- swhdeploy
- sudo
- gitorious
- swhteam
authorized_keys:
eniotna.t@gmail.com:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDZarzgHrzUYspvrgSI6fszrALo92BDys7QOkJgUfZa9t9m4g7dUANNtwBiqIbqijAQPmB1zKgG6QTZC5rJkRy6KqXCW/+Qeedw/FWIbuI7jOD5WxnglbEQgvPkkB8kf1xIF7icRfWcQmK2je/3sFd9yS4/+jftNMPPXkBCxYm74onMenyllA1akA8FLyujLu6MNA1D8iLLXvz6pBDTT4GZ5/bm3vSE6Go8Xbuyu4SCtYZSHaHC2lXZ6Hhi6dbli4d3OwkUWz+YhFGaEra5Fx45Iig4UCL6kXPkvL/oSc9KGerpT//Xj9qz1K7p/IrBS8+eA4X69bHYYV0UZKDADZSn
ardumont@louvre:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Xj8nwGWTb6VGFNIrlhVTLX6VFTlvpirjdgOTOz8riRxBTS9ra35g3cz8zfDl0iVyE455GXzxlm33w/uu3DX0jQOIzkcoEBRw+T33EK89lo6tCCd9xQrteWCTNR1ZBFloHSnYk2m7kw9kyrisziyAdULsCrXmMd3BH1oJyEpISA+sv/dtVpIOWdEQmkbLmdHl2uEdjBLjqb3BtAp2oJZMmppE5YjAx0Aa1+7uSnURf7NnwMx+0wTDMdfqn8z4wqI8eQny+B+bqLH9kY++52FfMVALuErGh5+75/vtd2xzRQamjKsBlTGjFFbMRagZiVNLDX2wtdudhNmnQDIKA+rH
swhworker:
uid: 1004
full_name: SWH Worker Acccount
shell: /bin/bash
groups:
- swhdeploy
- gitorious
swhstorage:
uid: 1005
full_name: SWH Storage Account
shell: /bin/bash
groups:
- swhdeploy
- swhstorage
swhwebapp:
uid: 1006
full_name: SWH Web App Account
shell: /bin/bash
groups: []
swhbackup:
uid: 1007
full_name: SWH Backup Account
shell: /bin/bash
groups: []
rdicosmo:
uid: 1008
full_name: Roberto Di Cosmo
shell: /bin/bash
groups:
- swhteam
authorized_keys:
dicosmo@voyager:
type: ssh-rsa
key: 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
swhteamannex:
uid: 1009
full_name: SWH Team Git Annex Account
shell: /bin/bash
groups:
- swhteam
authorized_keys:
swhteamannex@louvre:
type: ssh-rsa
key: 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
swhscheduler:
uid: 1010
full_name: SWH Scheduler Account
shell: /bin/bash
groups:
- swhscheduler
jbertran:
uid: 2001
full_name: Jordi Bertran de Balanda
shell: /bin/false
password: "!"
qcampos:
uid: 2002
full_name: Quentin Campos
shell: /bin/false
password: "!"
gitorious:
uid: 5000
full_name: Gitorious System User
shell: /bin/false
groups:
- gitorious
fiendish:
uid: 1011
full_name: Avi Kelman
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
avi@Temperance:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAAEAQCi9FEAQZ+WvvuVKjm5EJRgW1xwKfQwndBtZhJ8qqFVpHCl25tQW4ndfHVdr1BJmXVbAKlfsZs/hYBQq6JbTaxHZKGyajNZfuXOQ71CR2pn0XytpcMyt8l893BLOriTLhKoKXNwzjdCY7LmhNWDqR0GHm8C1d6fI7oYG+0PiTQr8cJ8wYvdVH5qrhzKMLJmGIbSOkQxCFYUjpXLk53fsAVyUMTn5SV9CTfMLCQ4nh2IXbbOVC3sIShNINzhNhkRTbHMHmo4Ujmn2jC6qtk3lawCTmrXNn7/mRgfrSkt5fSisSFM1xZ17wBG+zxQbnK00zcTHfDdxBmmsES5lWIndM4CqUwGgBtGGvrHsNS12XTsmvM4FA2DSiiKVLhTTQnG4B0CUcZFJn+dLDk+9IRN2uDbOY7Sg6653cJWYAeZq4YXtmhccCgtz82I5CtPYTMMZJqlHjvcGl9euafKPC196MPcWPXGNsidP/g3BZNncZE/4RgnbQChqiS4juXLB3KtIH6C50g1GZq/azrvZFlzU0Z9kzK99Vw0xPFIfi5wobWEq0JS31BHsd+NIVgm/riZIheb3hi3jyS2+Awm00aLwjEtS+x31xn99WZg2fRp8xpbbiZwMn5QlxarDWV6afySlWRe+iUdRtM2PGMBwSosQcrvKe/rOD27c/Sa5dWPvrrVsKBEATpFcy5XnNEcPxAbYGx0IY4CulVe0EYVH8jSoRhUQn4O41N8St3cmJPFGBfUP5v7/QdXhR8m+6yZKlaFTzdz0ZEcmc/TaCBxxBywuNPiLHZtIBJVuUPGAZC0eidmYK7iva2/a4lhuDXA5mVYm6lQzjdv+mUGqjkEzQ23LCMg3tA+6ewTZwJzoUTTXosgLqVhJ4KchJTbGYdvG7IRQmmyTzRwHkqJej2e+xgdPPY2BFBl3WA+dEle6gMR7FB54ubIrCdJfb5hwVaGlcK3s4KpXapAjHP7jndsPKVSPP8Ax0fqPiCOw3wTIyQGV+ZfLf7PjqpTAQn7a1QA6CUG47p9HqofEqrrQEDyC9vRan7NeD5IVQq7dpgGwx4zEDnR1m2hfuoXzDRM4Vd+uNhC0WotkGJatKZeaoHx8P9VE8zhir2Py71AxellhfvGuzxPJ4XNDRjAenMmSbVURyLFpt6iA2bFeolCCb7qVodKORvquFRQEXTlkAxRj7OiMDzniRfZbtGER9zkXGp9+Sw3gz+igxND5KAzJgt2ubpChF1KyxKEu1QCeZ3n+1pIdeTSZT0rFSnZNYdb/UuIlKgICqxU0sutXIZqY1k5QSFWVNjA60QuWLMDW5CrhouGdFEBCksKDKiJinhcHXiDx93LJYzG2CVPTuW+gka0ZyfS18pN
morane:
uid: 1012
full_name: Morane Otilia Gruenpeter
shell: /bin/bash
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
morane.gg@gmail.com:
type: ssh-rsa
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDm8kH1pP+4ENKmpkTCkL2ashxxnOFVndGrcvfX05lV1hOo2NdItpdoR9txIgFEs3d7v73mtH4nWciUyaK7FIByrtvsR2TIhdVgEcb0Xai8viV+sDMTndpiNlWNilbfxm0K70tgpG4BeSWRJy8cPxnCR9CWoB2Vo9Df7lDKz1LXDgfY4VLJd69ahf1DPFUDjpWIEQdPFX2ZyGUYM+0yPXIoyYW/qreDt1JkYZXXVbRAV8j44/TVgTRYJLgYb9ThW6WzlGM1S4uP7GQdAuROCcspqW3ahV/UmV4Z9SM6S34NN182KvM0Ve7uxAPQz+IdWOgZTK0pvd+hfjHKbLSTA6I3
seirl:
uid: 1013
full_name: Antoine Pietri
shell: /usr/bin/zsh
groups:
- swhdev
- swhstorage
- swhteam
authorized_keys:
seirl:
type: ssh-ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAILiua8eEg+nU0XSbYPTgnOMftzvpbN+u7v5jDabeO/0E
groups:
adm:
gid: 4 # assigned from base-files
zack:
gid: 1000
olasd:
gid: 1001
ardumont:
gid: 1003
swhworker:
gid: 1004
swhdev:
gid: 1002
swhstorage:
gid: 1005
swhdeploy:
gid: 1006
swhbackup:
gid: 1007
swhwebapp:
gid: 1008
swhteam:
gid: 1009
swhscheduler:
gid: 1010
sudo:
gid: 27 # assigned from base-files
gitorious:
gid: 5000
munin::node::allow:
- 192.168.100.29
munin::node::network: 192.168.100.0/23
munin::node::plugins::enable:
- apt
- postfix_mailvolume
- postfix_mailqueue
munin::node::plugins::disable:
- apt_all
- exim_mailstats
- exim_mailqueue
munin::master::hostname: munin.internal.softwareheritage.org
munin::plugins::rabbitmq::messages_warn: 18000000
munin::plugins::rabbitmq::messages_crit: 20000000
munin::plugins::rabbitmq::queue_memory_warn: 1073741824 # 1GB
munin::plugins::rabbitmq::queue_memory_crit: 2147483648 # 2GB
puppet::master::hostname: pergamon.internal.softwareheritage.org
strict_transport_security::max_age: 15768000
# Those variables get picked up by 'include ::php::fpm::daemon'
php::fpm::daemon::log_owner: www-data
php::fpm::daemon::log_group: adm
php::fpm::daemon::log_dir_mode: '0750'
# Those variables get picked up by 'include ::apache'
apache::server_tokens: 'Prod'
apache::server_signature: 'Off'
apache::trace_enable: 'Off'
# Those variables need to be set manually in the SSL vhosts.
apache::ssl_protocol: all -SSLv2 -SSLv3
apache::ssl_honorcipherorder: 'On'
apache::ssl_cipher: EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
apache::hsts_header: "add Strict-Transport-Security \"max-age=%{hiera('strict_transport_security::max_age')}\""
ssl:
star_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgIQDjmSRHUEXcLOQA5yynS0ljANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wg
Q0EgMzAeFw0xNTEwMTUwMDAwMDBaFw0xODEwMTkxMjAwMDBaMIG/MQswCQYDVQQG
EwJGUjERMA8GA1UECBMIWXZlbGluZXMxFTATBgNVBAcTDFJvY3F1ZW5jb3VydDFJ
MEcGA1UEChNASW5zdGl0dXQgTmF0aW9uYWwgZGUgUmVjaGVyY2hlIGVuIEluZm9y
bWF0aXF1ZSBldCBlbiBBdXRvbWF0aXF1ZTEaMBgGA1UECxMRU29mdHdhcmUgSGVy
aXRhZ2UxHzAdBgNVBAMMFiouc29mdHdhcmVoZXJpdGFnZS5vcmcwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDkJbBlHS8qDspHFiif9yqNrSalWNcAoxUr
JRAW9NGhj98PTu3nVnmcLSkGLhXGNUkoU3xQ7p9fSQmHLgun4Suw4/DzRhwIyrXz
pb1WjoMbaSqMenROexSb7C7YnwX19BH8d8A3Hut+VKzYLMG9/aevS7gd6+cLOT7P
GTL6P5hL2XZfHlK/P8NNtWkefXrZJ/7TeD3Tx2wuzaercglsmfOQ2RJamLOr9oRR
3++hxAQrrq0o3k0t8d7OWMNAFsrxzJJRpfoEWM9GYNzDbmsoOAKUwgZtgDs/seV+
zByuzE3EC3Br1kNOc9bnNGn1p5Vybk1Pnu/MpkYaxG35oTN6r4i9whH1EJA6Ag8b
cPOO9rR66emmyVc7PyGJl3zo6ajfzJ8WLrElLeofqcxIi10pr7jLEoIxWUmTHTRa
2yi9juR9gWnMl930yTuNMF2YPlZFwGJq0UY2Bqpey25UdLUIYraqzn6I6Jpc52fq
CUgmA390pyADqe8EhgOC6+BhTn0fFLnoOr0+p2kXLUHpCCG7ZmPg/mIkb4aX589o
rRYbkhKx2yvpAYtwmcPdmOTkXry+j+ifXGbdmT6/uYeWmzYEuDFSI/cPm9OlSBgv
TGop9uMOvrlHSzsLFlmZd05SweCjs/30EpRiIzdPD0bgA6QUk8s/Y6tstyR2aY4r
gjDGFuPgfwIDAQABo4IB5TCCAeEwHwYDVR0jBBgwFoAUZ/2IIBQnmMcJ0iUZu+lR
EWN1UGIwHQYDVR0OBBYEFF/v9armSIX9Cc27QHF7arptmN5MMDcGA1UdEQQwMC6C
Fiouc29mdHdhcmVoZXJpdGFnZS5vcmeCFHNvZnR3YXJlaGVyaXRhZ2Uub3JnMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYD
VR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL1RFUkVOQVNT
TENBMy5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9URVJFTkFT
U0xDQTMuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEW
HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG4GCCsGAQUF
BwEBBGIwYDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMDgG
CCsGAQUFBzAChixodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vVEVSRU5BU1NM
Q0EzLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCYCI6aos3H
z+uchhCCaxQNyxcjwQPdlNkQtdpJPxDEX6cOBPp3zFIhakQJHMbKrJBd4UEDTrzF
zcJWNmZpFVs7nmSIYP5Asb74gQ83OoGL4IZBZNl6l7id99SmldeVl/Ptbfdkt8cw
gV/8SgwLXSIxB/aStyo0eytdxri+BqZwKjJejaKfhzxCe50gLJaS+zyjTvlhljA1
vDYmBramvEzGbt5ONEEAnPAYhKsSdZGo71ARbrit/nuLVUmY8zvoGblTNZHHRgT/
JPsYp3CjKIVTX9v5tQjaTVt6oPaL9yQhBJaj1dbMrYmVyyaLyrY8i/O/Gdbfcesl
wOHPLsGhuYNF
-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
star_internal_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIQCHC8xa8/25Wakctq7u/kZTANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
b3QgQ0EwHhcNMTQxMTE4MTIwMDAwWhcNMjQxMTE4MTIwMDAwWjBkMQswCQYDVQQG
EwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt
MQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wgQ0EgMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMV2Dw/ZQyk7bG3RR63eEL8jwnio
Snc18SNb4EweQefCMQC9iDdFdd25AhCAHo/tZCMERaegOTuBTc9jP8JJ/yKeiLDS
lrlcinQfkioq8hLIt2hUtVhBgUBoBhpPhSn7tU08D08/QJYbzqjMXjX/ZJj1dd10
VAWgNhEEEiRVY++Udy538RV27tOkWUUhn6i+0SftCuirOMo/h9Ha8Y+5Cx9E5+Ct
85XCFk3shKM6ktTPxn3mvcsaQE+zVLHzj28NHuO+SaNW5Ae8jafOHbBbV1bRxBz8
mGXRzUYvkZS/RYVJ+G1ShxwCVgEnFqtyLvRx5GG1IKD6JmlqCvGrn223zyUCAwEA
AaOCAaYwggGiMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMHkG
CCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln
aUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqgOKA2hjRodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3Js
MDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk
SURSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo
dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBRn/YggFCeYxwnS
JRm76VERY3VQYjAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkq
hkiG9w0BAQsFAAOCAQEAqSg1esR71tonHqyYzyc2TxEydHTmQN0dzfJodzWvs4xd
xgS/FfQjZ4u5b5cE60adws3J0aSugS7JurHogNAcyTnBVnZZbJx946nw09E02DxJ
WYsamM6/xvLYMDX/6W9doK867mZTrqqMaci+mqege9iCSzMTyAfzd9fzZM2eY/lC
J1OuEDOJcjcV8b73HjWizsMt8tey5gvHacDlH198aZt+ziYaM0TDuncFO7pdP0GJ
+hY77gRuW6xWS++McPJKe1e9GW6LNgdUJi2GCZQfXzer8CM/jyxflp5HcahE3qm5
hS+1NGClXwmgmkMd1L8tRNaN2v11y18WoA5hwnA9Ng==
-----END CERTIFICATE-----
stats_export_softwareheritage_org:
certificate: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ca_bundle: |
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIQCHC8xa8/25Wakctq7u/kZTANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBBc3N1cmVkIElEIFJv
b3QgQ0EwHhcNMTQxMTE4MTIwMDAwWhcNMjQxMTE4MTIwMDAwWjBkMQswCQYDVQQG
EwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFt
MQ8wDQYDVQQKEwZURVJFTkExGDAWBgNVBAMTD1RFUkVOQSBTU0wgQ0EgMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMV2Dw/ZQyk7bG3RR63eEL8jwnio
Snc18SNb4EweQefCMQC9iDdFdd25AhCAHo/tZCMERaegOTuBTc9jP8JJ/yKeiLDS
lrlcinQfkioq8hLIt2hUtVhBgUBoBhpPhSn7tU08D08/QJYbzqjMXjX/ZJj1dd10
VAWgNhEEEiRVY++Udy538RV27tOkWUUhn6i+0SftCuirOMo/h9Ha8Y+5Cx9E5+Ct
85XCFk3shKM6ktTPxn3mvcsaQE+zVLHzj28NHuO+SaNW5Ae8jafOHbBbV1bRxBz8
mGXRzUYvkZS/RYVJ+G1ShxwCVgEnFqtyLvRx5GG1IKD6JmlqCvGrn223zyUCAwEA
AaOCAaYwggGiMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgGGMHkG
CCsGAQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tMEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln
aUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqgOKA2hjRodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3Js
MDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVk
SURSb290Q0EuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo
dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMB0GA1UdDgQWBBRn/YggFCeYxwnS
JRm76VERY3VQYjAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzANBgkq
hkiG9w0BAQsFAAOCAQEAqSg1esR71tonHqyYzyc2TxEydHTmQN0dzfJodzWvs4xd
xgS/FfQjZ4u5b5cE60adws3J0aSugS7JurHogNAcyTnBVnZZbJx946nw09E02DxJ
WYsamM6/xvLYMDX/6W9doK867mZTrqqMaci+mqege9iCSzMTyAfzd9fzZM2eY/lC
J1OuEDOJcjcV8b73HjWizsMt8tey5gvHacDlH198aZt+ziYaM0TDuncFO7pdP0GJ
+hY77gRuW6xWS++McPJKe1e9GW6LNgdUJi2GCZQfXzer8CM/jyxflp5HcahE3qm5
hS+1NGClXwmgmkMd1L8tRNaN2v11y18WoA5hwnA9Ng==
-----END CERTIFICATE-----
bind::update_key: local-update
bind::zones:
internal.softwareheritage.org:
domain: internal.softwareheritage.org
100.168.192.in-addr.arpa:
domain: 100.168.192.in-addr.arpa
101.168.192.in-addr.arpa:
domain: 101.168.192.in-addr.arpa
bind::zones::default_data:
zone_type: master
dynamic: true
masters: ''
transfer_source: ''
allow_updates: []
update_policies: ''
allow_transfers: ''
dnssec: false
key_directory: ''
ns_notify: true
also_notify: ''
allow_notify: ''
forwarders: ''
forward: ''
source: ''
bind::resource_records:
internal/NS:
type: NS
record: internal.softwareheritage.org
data: pergamon.internal.softwareheritage.org.
100/NS:
type: NS
record: 101.168.192.in-addr.arpa
data: pergamon.internal.softwareheritage.org.
101/NS:
type: NS
record: 101.168.192.in-addr.arpa
data: pergamon.internal.softwareheritage.org.
db/CNAME:
type: CNAME
record: db.internal.softwareheritage.org
data: prado.internal.softwareheritage.org.
debian/CNAME:
type: CNAME
record: debian.internal.softwareheritage.org
data: pergamon.internal.softwareheritage.org.
backup/CNAME:
type: CNAME
record: backup.internal.softwareheritage.org
data: banco.internal.softwareheritage.org.
banco/A:
record: banco.internal.softwareheritage.org
data: 192.168.100.18
beaubourg/A:
record: beaubourg.internal.softwareheritage.org
data: 192.168.100.32
icinga/CNAME:
type: CNAME
record: icinga.internal.softwareheritage.org
data: pergamon.internal.softwareheritage.org.
faitout/CNAME:
type: CNAME
record: faitout.internal.softwareheritage.org
data: prado.internal.softwareheritage.org.
rabbitmq/CNAME:
type: CNAME
record: rabbitmq.internal.softwareheritage.org
data: saatchi.internal.softwareheritage.org.
# VPN hosts
zack/A:
record: zack.internal.softwareheritage.org
data: 192.168.101.6
olasd/A:
record: olasd.internal.softwareheritage.org
data: 192.168.101.10
ardumont/A:
record: ardumont.internal.softwareheritage.org
data: 192.168.101.14
rdicosmo/A:
record: rdicosmo.internal.softwareheritage.org
data: 192.168.101.38
petit-palais/A:
record: petit-palais.internal.softwareheritage.org
data: 192.168.101.58
petitpalais/CNAME:
type: CNAME
record: petitpalais.internal.softwareheritage.org
data: petit-palais.internal.softwareheritage.org.
grand-palais/A:
record: grand-palais.internal.softwareheritage.org
data: 192.168.101.62
grandpalais/CNAME:
type: CNAME
record: grandpalais.internal.softwareheritage.org
data: grand-palais.internal.softwareheritage.org.
worker01-euwest/A:
type: A
record: worker01.euwest.azure.internal.softwareheritage.org
data: 192.168.200.4
worker02-euwest/A:
type: A
record: worker02.euwest.azure.internal.softwareheritage.org
data: 192.168.200.5
worker03-euwest/A:
type: A
record: worker03.euwest.azure.internal.softwareheritage.org
data: 192.168.200.6
worker04-euwest/A:
type: A
record: worker04.euwest.azure.internal.softwareheritage.org
data: 192.168.200.7
worker05-euwest/A:
type: A
record: worker05.euwest.azure.internal.softwareheritage.org
data: 192.168.200.8
worker06-euwest/A:
type: A
record: worker06.euwest.azure.internal.softwareheritage.org
data: 192.168.200.9
worker07-euwest/A:
type: A
record: worker07.euwest.azure.internal.softwareheritage.org
data: 192.168.200.10
worker08-euwest/A:
type: A
record: worker08.euwest.azure.internal.softwareheritage.org
data: 192.168.200.11
bind::resource_records::default_data:
type: A
bind::clients:
- 192.168.100.0/24
- 192.168.101.0/24
- 192.168.200.0/21
- 127.0.0.0/8
- '::1/128'
bind::autogenerate:
'192.168.100.0/24': internal.softwareheritage.org
dar::backup::storage: /srv/backups
dar::backup::num_backups: 1
dar::backup::base: /
dar::backup::select: [] # empty list = full backup
dar::backup::exclude:
- dev
- proc
- run
- srv/backups
- srv/remote-backups
- srv/softwareheritage/objects
- srv/storage
- sys
- tmp
- var/cache
- var/run
- var/tmp
dar::backup::options:
- -zbzip2
dar::cron::hour: 0
dar::cron::minute: fqdn_rand
dar::cron::month: '*'
dar::cron::monthday: '*'
dar::cron::weekday: '*'
dar_server::backup::storage: /srv/remote-backups
dar_server::cron::hour: '0-4'
dar_server::cron::minute: '*/10'
dar_server::cron::month: '*'
dar_server::cron::monthday: '*'
dar_server::cron::weekday: '*'
phabricator::basepath: /srv/phabricator
phabricator::user: phabricator
phabricator::vcs_user: git
phabricator::notification::client_host: 127.0.0.1
phabricator::notification::client_port: 22280
phabricator::notification::listen: "%{hiera('phabricator::notification::client_host')}:%{hiera('phabricator::notification::client_port')}"
phabricator::mysql::database_prefix: phabricator
phabricator::mysql::username: phabricator
phabricator::mysql::conf::max_allowed_packet: 33554432
phabricator::mysql::conf::sql_mode: STRICT_ALL_TABLES
phabricator::mysql::conf::ft_stopword_file: "%{hiera('phabricator::basepath')}/phabricator/resources/sql/stopwords.txt"
phabricator::mysql::conf::ft_min_word_len: 3
phabricator::mysql::conf::ft_boolean_syntax: "' |-><()~*:\"\"&^'"
phabricator::mysql::conf::innodb_buffer_pool_size: 4G
phabricator::mysql::conf::innodb_file_per_table: TRUE
phabricator::mysql::conf::innodb_flush_method: O_DIRECT
phabricator::mysql::conf::innodb_log_file_size: 1G
phabricator::php::fpm_listen: 127.0.0.1:9001
phabricator::php::max_file_size: 128M
phabricator::php::opcache_validate_timestamps: 0
phabricator::vhost::name: forge.softwareheritage.org
phabricator::vhost::docroot: "%{hiera('phabricator::basepath')}/phabricator/webroot"
phabricator::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
phabricator::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
phabricator::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
phabricator::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
mediawiki::php::fpm_listen: 127.0.0.1:9002
mediawiki::vhosts:
intranet.softwareheritage.org:
swh_logo: /images/9/99/Swh-intranet-logo.png
mysql:
username: mediawiki
dbname: mediawiki
aliases: []
wiki.softwareheritage.org:
swh_logo: /images/b/b2/Swh-logo.png
mysql:
username: mediawiki_wg
dbname: mediawiki_wg
aliases: []
mediawiki::vhost::docroot: /var/lib/mediawiki
mediawiki::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
mediawiki::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
mediawiki::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
mediawiki::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
annex::basepath: /srv/softwareheritage/annex
annex::vhost::name: annex.softwareheritage.org
annex::vhost::docroot: "%{hiera('annex::basepath')}/webroot"
annex::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
annex::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
annex::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
annex::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
ssh::port: 22
ssh::permitrootlogin: without-password
swh::base_directory: /srv/softwareheritage
swh::conf_directory: /etc/softwareheritage
swh::log_directory: /var/log/softwareheritage
swh::global_conf::file: "%{hiera('swh::conf_directory')}/global.ini"
swh::global_conf::contents: |
# Managed by puppet (class profile::swh) - modifications will be overwritten
[main]
log_db = host=db dbname=softwareheritage-log user=guest
swh::apt_config::swh_repository::hostname: debian.internal.softwareheritage.org
swh::apt_config::swh_repository::basepath: "%{hiera('swh::base_directory')}/repository"
swh::apt_config::swh_repository: "http://%{hiera('swh::apt_config::swh_repository::hostname')}/"
swh::apt_config::debian_mirror::hostname: deb.debian.org
swh::apt_config::debian_mirror: "http://%{hiera('swh::apt_config::debian_mirror::hostname')}/debian/"
swh::apt_config::debian_security_mirror::hostname: "%{hiera('swh::apt_config::debian_mirror::hostname')}"
swh::apt_config::debian_security_mirror: "http://%{hiera('swh::apt_config::debian_mirror::hostname')}/debian-security/"
swh::apt_config::azure_repository::hostname: debian-archive.trafficmanager.net
swh::apt_config::azure_repository: "http://%{hiera('swh::apt_config::azure_repository::hostname')}/debian-azure/"
swh::deploy::directory: "%{hiera('swh::conf_directory')}/deploy"
swh::deploy::group: swhdeploy
swh::deploy::public_key: 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWrJX/uUss/EYZaTp2EIsZgg3ZSH8JcNZV5gBdNZ7EHcQcqxYUCqmwv9Ss3xT8n9kIrH6iz/vquqf84XR+keoZK3bsp50tMOY8LJWpcl/JK2XD6ovoJrHPu+iAroLkE59RdTa1Vz+jF67Q2UuG9f0nKwL4rnkeWTyuK/zAbyHyYKFQntkkwMr5/YTU8sjl/4aNF/2Ww8hitdi2GORlCjav2bB0wyPBA2e8sMt8Hp9O4TIWg/RD6vPX+ZvuFaB/Lw/Hv21622QGTHoZiO92/8/W9/t24il6SU4z96ZGfXqdUZkpPYKBGwyIkZkS4dN6jb4CcRlyXTObphyu3dAlABRt swhworker@worker01'
swh::deploy::storage::conf_directory: "%{hiera('swh::conf_directory')}/storage"
swh::deploy::storage::conf_file: "%{hiera('swh::deploy::storage::conf_directory')}/storage.yml"
swh::deploy::storage::user: swhstorage
swh::deploy::storage::group: swhstorage
swh::deploy::storage::db::host: db
swh::deploy::storage::db::port: 5432
swh::deploy::storage::db::user: swhstorage
swh::deploy::storage::db::dbname: softwareheritage
swh::deploy::storage::directory: "%{hiera('swh::base_directory')}/objects"
swh::deploy::storage::uwsgi::listen: 127.0.0.1:5002
swh::deploy::storage::uwsgi::workers: 4
swh::deploy::storage::uwsgi::max_requests: 32
swh::deploy::storage::uwsgi::max_requests_delta: 4
swh::deploy::storage::uwsgi::reload_mercy: 3600
swh::deploy::storage::uwsgi::http_workers: 1
swh::deploy::storage::uwsgi::http_keepalive: 1
swh::deploy::storage::uwsgi::http_timeout: 100000
swh::deploy::storage::config:
storage:
cls: local
args:
db: "host=%{hiera('swh::deploy::storage::db::host')} port=%{hiera('swh::deploy::storage::db::port')} user=%{hiera('swh::deploy::storage::db::user')} dbname=%{hiera('swh::deploy::storage::db::dbname')} password=%{hiera('swh::deploy::storage::db::password')}"
objstorage:
cls: remote
args:
url: "http://uffizi.internal.softwareheritage.org:5003/"
swh::deploy::storage_listener::conf_directory: "%{hiera('swh::conf_directory')}/storage"
swh::deploy::storage_listener::conf_file: "%{hiera('swh::deploy::storage_listener::conf_directory')}/listener.ini"
swh::deploy::storage_listener::user: swhstorage
swh::deploy::storage_listener::group: swhstorage
swh::deploy::storage_listener::database: host=db user=guest dbname=softwareheritage
swh::deploy::storage_listener::topic_prefix: swh.tmp_journal.new
swh::deploy::storage_listener::kafka_brokers:
- getty.internal.softwareheritage.org
swh::deploy::storage_listener::poll_timeout: 10
swh::deploy::journal_publisher::conf_directory: "%{hiera('swh::conf_directory')}/journal"
swh::deploy::journal_publisher::conf_file: "%{hiera('swh::deploy::journal_publisher::conf_directory')}/publisher.yml"
swh::deploy::journal_publisher::user: swhstorage
swh::deploy::journal_publisher::group: swhstorage
swh::deploy::journal_publisher::config:
brokers:
- getty.internal.softwareheritage.org
temporary_prefix: swh.tmp_journal.new
final_prefix: swh.journal.test_publisher
consumer_id: swh.journal.publisher.test
publisher_id: swh.journal.publisher.test
object_types:
- content
- revision
- release
max_messages: 1000
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
swh::deploy::archiver_content_updater::conf_file: "%{hiera('swh::deploy::worker::swh_storage_archiver::conf_directory')}/content_updater.yml"
swh::deploy::archiver_content_updater::user: swhstorage
swh::deploy::archiver_content_updater::group: swhstorage
swh::deploy::archiver_content_updater::config:
brokers:
- getty.internal.softwareheritage.org
auto_offset_reset: earliest
topic_prefix: swh.journal.test_publisher
consumer_identifier: swh.journal.archiver.content.updater
object_types:
- content
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
sources_present:
- uffizi
swh::deploy::objstorage::conf_directory: "%{hiera('swh::conf_directory')}/objstorage"
swh::deploy::objstorage::conf_file: "%{hiera('swh::deploy::objstorage::conf_directory')}/objstorage.yml"
swh::deploy::objstorage::user: "%{hiera('swh::deploy::storage::user')}"
swh::deploy::objstorage::group: "%{hiera('swh::deploy::storage::group')}"
swh::deploy::objstorage::directory: "%{hiera('swh::deploy::storage::directory')}"
swh::deploy::objstorage::slicing: 0:2/2:4/4:6
swh::deploy::objstorage::config:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
swh::deploy::objstorage::uwsgi::listen: 127.0.0.1:5003
swh::deploy::objstorage::uwsgi::workers: "%{hiera('swh::deploy::storage::uwsgi::workers')}"
swh::deploy::objstorage::uwsgi::max_requests: "%{hiera('swh::deploy::storage::uwsgi::max_requests')}"
swh::deploy::objstorage::uwsgi::max_requests_delta: "%{hiera('swh::deploy::storage::uwsgi::max_requests_delta')}"
swh::deploy::objstorage::uwsgi::reload_mercy: "%{hiera('swh::deploy::storage::uwsgi::reload_mercy')}"
swh::deploy::objstorage::uwsgi::http_workers: "%{hiera('swh::deploy::storage::uwsgi::http_workers')}"
swh::deploy::objstorage::uwsgi::http_keepalive: "%{hiera('swh::deploy::storage::uwsgi::http_keepalive')}"
swh::deploy::objstorage::uwsgi::http_timeout: "%{hiera('swh::deploy::storage::uwsgi::http_timeout')}"
swh::deploy::objstorage_log_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_log_checker::conf_file: "%{hiera('swh::deploy::objstorage_log_checker::conf_directory')}/log_checker.yml"
swh::deploy::objstorage_log_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_log_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_log_checker:config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.log
swh::deploy::objstorage_repair_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_repair_checker::conf_file: "%{hiera('swh::deploy::objstorage_repair_checker::conf_directory')}/repair_checker.yml"
swh::deploy::objstorage_repair_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_repair_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_repair_checker::config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.repair
backup_storages:
banco:
cls: remote
args:
url: http://banco:5003/
uffizi:
cls: remote
args:
url: http://uffizi:5002/
swh::deploy::objstorage_archive_notifier_checker::conf_directory: "%{hiera('swh::deploy::objstorage::conf_directory')}"
swh::deploy::objstorage_archive_notifier_checker::conf_file: "%{hiera('swh::deploy::objstorage_archive_notifier_checker::conf_directory')}/archive_notifier_checker.yml"
swh::deploy::objstorage_archive_notifier_checker::user: "%{hiera('swh::deploy::objstorage::user')}"
swh::deploy::objstorage_archive_notifier_checker::group: "%{hiera('swh::deploy::objstorage::group')}"
swh::deploy::objstorage_archive_notifier_checker::log_tag: objstorage.checker.archive_notifier
swh::deploy::objstorage_archive_notifier_checker::storage_name: this-must-be-overriden-on-a-host-basis
swh::deploy::objstorage_archive_notifier_checker::db::host: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')}"
swh::deploy::objstorage_archive_notifier_checker::db::dbname: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')}"
swh::deploy::objstorage_archive_notifier_checker::db::user: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')}"
swh::deploy::objstorage_archive_notifier_checker::db::password: "%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
swh::deploy::objstorage_archive_notifier_checker::config:
storage:
cls: pathslicing
args:
root: "%{hiera('swh::deploy::objstorage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
batch_size: 1000
log_tag: objstorage.checker.archive_notifier
storage_name: this-must-be-overriden-on-a-per-host-basis
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
swh::deploy::webapp::conf_directory: "%{hiera('swh::conf_directory')}/webapp"
swh::deploy::webapp::conf_file: "%{hiera('swh::deploy::webapp::conf_directory')}/webapp.yml"
swh::deploy::webapp::user: swhwebapp
swh::deploy::webapp::group: swhwebapp
swh::deploy::webapp::conf::log_dir: "%{hiera('swh::log_directory')}/webapp"
swh::deploy::webapp::uwsgi::listen: 127.0.0.1:5003
swh::deploy::webapp::uwsgi::protocol: uwsgi
swh::deploy::webapp::uwsgi::workers: 32
swh::deploy::webapp::uwsgi::max_requests: 512
swh::deploy::webapp::uwsgi::max_requests_delta: 8
swh::deploy::webapp::uwsgi::reload_mercy: 3600
swh::deploy::webapp::vhost::name: archive.softwareheritage.org
swh::deploy::webapp::vhost::aliases:
- base.softwareheritage.org
swh::deploy::webapp::vhost::docroot: "/var/www/%{hiera('swh::deploy::webapp::vhost::name')}"
swh::deploy::webapp::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
swh::deploy::webapp::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
swh::deploy::webapp::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
swh::deploy::webapp::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
swh::deploy::webapp::redis: "redis://:%{hiera('redis::server::password')}@%{hiera('redis::server::bind')}:%{hiera('redis::server::port')}"
swh::deploy::webapp::config:
storage:
cls: remote
args:
url: http://127.0.0.1:5002/
log_dir: "%{hiera('swh::deploy::webapp::conf::log_dir')}"
secret_key: "%{hiera('swh::deploy::webapp::conf::secret_key')}"
limiter:
global_limits:
- 120 per hour
headers_enabled: true
strategy: moving-window
storage_uri: "%{hiera('swh::deploy::webapp::redis')}"
storage_options: {}
in_memory_fallback:
- 120 per hour
swh::deploy::webapp::locked_endpoints:
- /browse/
- /api/1/content/[^/]+/symbol/
- /api/1/entity/
- /api/1/provenance/
- /api/1/revision/origin/.*/directory/
- /api/1/revision/[^/]+/raw/
swh::deploy::scheduler::conf_file: "%{hiera('swh::conf_directory')}/scheduler.ini"
swh::deploy::scheduler::user: swhscheduler
swh::deploy::scheduler::group: swhscheduler
swh::deploy::scheduler::db::host: db
swh::deploy::scheduler::db::dbname: softwareheritage-scheduler
swh::deploy::scheduler::db::user: swhscheduler
# swh::deploy::scheduler::db::password in private data
swh::deploy::scheduler::database: "host=%{hiera('swh::deploy::scheduler::db::host')} dbname=%{hiera('swh::deploy::scheduler::db::dbname')} user=%{hiera('swh::deploy::scheduler::db::user')} password=%{hiera('swh::deploy::scheduler::db::password')}"
# swh::deploy::scheduler::task_broker::password in private data
swh::deploy::scheduler::task_broker: "amqp://swhproducer:%{hiera('swh::deploy::scheduler::task_broker::password')}@rabbitmq:5672//"
swh::deploy::scheduler::task_packages:
- python3-swh.loader.git
- python3-swh.loader.dir
- python3-swh.loader.tar
- python3-swh.lister.github
swh::deploy::scheduler::task_modules:
- swh.loader.git.tasks
- swh.loader.dir.tasks
- swh.loader.tar.tasks
- swh.lister.github.tasks
# swh::deploy::worker::task_broker::password in private data
swh::deploy::worker::task_broker: "amqp://swhconsumer:%{hiera('swh::deploy::worker::task_broker::password')}@rabbitmq:5672//"
swh::deploy::worker::instances:
- swh_loader_git
- swh_lister_github
swh::deploy::worker::swh_loader_git::concurrency: 4
swh::deploy::worker::swh_loader_git::loglevel: info
swh::deploy::worker::swh_loader_git::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_git::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
save_data: true
save_data_path: /srv/storage/space/data/sharded_packfiles
directory_packet_size: 100
swh::deploy::worker::swh_loader_git_disk::concurrency: 1
swh::deploy::worker::swh_loader_git_disk::loglevel: info
swh::deploy::worker::swh_loader_git_disk::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_git_disk::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
swh::deploy::worker::swh_loader_svn::concurrency: 1
swh::deploy::worker::swh_loader_svn::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_loader_svn::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_loader_svn::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
send_contents: true
send_directories: true
send_revisions: true
send_releases: true
send_occurrences: true
content_packet_size: 1000
content_packet_block_size_bytes: 104857600
content_packet_size_bytes: 1073741824
directory_packet_size: 250
revision_packet_size: 100
release_packet_size: 100
occurrence_packet_size: 100
check_revision: 1000
swh::deploy::worker::swh_reader_git::concurrency: 6
swh::deploy::worker::swh_reader_git::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_reader_git::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_reader_git::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
send_contents: False
send_directories: False
send_revisions: False
send_releases: False
send_occurrences: False
pack_size_bytes: 274877906944
pack_storage_base: ''
next_task:
queue: 'swh.storage.archiver.tasks.SWHArchiverToBackendTask'
batch_size: 100
destination: azure
pack_storage_base: ''
swh::deploy::worker::swh_provenance_cache::concurrency: 1
swh::deploy::worker::swh_provenance_cache::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_provenance_cache::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_provenance_cache::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
revision_packet_size: 100
swh::deploy::worker::swh_lister_github::concurrency: 1
swh::deploy::worker::swh_lister_github::loglevel: warning
# Contains a password: in private data
swh::deploy::worker::swh_lister_github::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_lister_github::db::host: db
swh::deploy::worker::swh_lister_github::db::dbname: lister-github
swh::deploy::worker::swh_lister_github::db::user: lister-github
#swh::deploy::worker::swh_lister_github::db::password in private data
swh::deploy::worker::swh_lister_github::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
scheduling_db: "%{hiera('swh::deploy::scheduler::database')}"
lister_db_url: "postgresql://%{hiera('swh::deploy::worker::swh_lister_github::db::user')}:%{hiera('swh::deploy::worker::swh_lister_github::db::password')}@%{hiera('swh::deploy::worker::swh_lister_github::db::host')}/%{hiera('swh::deploy::worker::swh_lister_github::db::dbname')}"
# credentials in private data
swh::deploy::worker::swh_storage_archiver::conf_directory: "%{hiera('swh::conf_directory')}/archiver"
swh::deploy::worker::swh_storage_archiver::conf_file: "%{hiera('swh::deploy::worker::swh_storage_archiver::conf_directory')}/worker.yml"
swh::deploy::worker::swh_storage_archiver::archival_max_age: 3600
swh::deploy::worker::swh_storage_archiver::retention_policy: 2
swh::deploy::worker::swh_storage_archiver::batch_max_size: 1000
swh::deploy::worker::swh_storage_archiver::db::host: db
swh::deploy::worker::swh_storage_archiver::db::dbname: softwareheritage-archiver
swh::deploy::worker::swh_storage_archiver::db::user: "%{hiera('swh::deploy::storage::db::user')}"
swh::deploy::worker::swh_storage_archiver::db::password: "%{hiera('swh::deploy::storage::db::password')}"
swh::deploy::worker::swh_storage_archiver::storages:
- host: uffizi
cls: pathslicing
args:
root: "%{hiera('swh::deploy::storage::directory')}"
slicing: "%{hiera('swh::deploy::objstorage::slicing')}"
- host: banco
cls: remote
args:
url: http://banco.internal.softwareheritage.org:5003/
swh::deploy::worker::swh_storage_archiver::concurrency: 10
swh::deploy::worker::swh_storage_archiver::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_storage_archiver::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_storage_archiver::config:
archival_max_age: "%{hiera('swh::deploy::worker::swh_storage_archiver::archival_max_age')}"
retention_policy: "%{hiera('swh::deploy::worker::swh_storage_archiver::retention_policy')}"
batch_max_size: "%{hiera('swh::deploy::worker::swh_storage_archiver::batch_max_size')}"
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
swh::deploy::worker::swh_storage_archiver_azure::conf_file: "%{hiera('swh::deploy::worker::swh_storage_archiver::conf_directory')}/worker-to-backend.yml"
swh::deploy::worker::swh_storage_archiver_azure::concurrency: 10
swh::deploy::worker::swh_storage_archiver_azure::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_storage_archiver_azure::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_storage_archiver_azure::config:
batch_max_size: "%{hiera('swh::deploy::worker::swh_storage_archiver::batch_max_size')}"
source: uffizi
destination: azure
force_copy: false
archiver_storage:
cls: db
args:
dbconn: "host=%{hiera('swh::deploy::worker::swh_storage_archiver::db::host')} user=%{hiera('swh::deploy::worker::swh_storage_archiver::db::user')} dbname=%{hiera('swh::deploy::worker::swh_storage_archiver::db::dbname')} password=%{hiera('swh::deploy::worker::swh_storage_archiver::db::password')}"
next_task:
queue: swh.indexer.tasks.SWHOrchestratorAllContentsTask
batch_size: 10
swh::azure_objstorage::config:
cls: multiplexer
args:
objstorages:
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 0euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::0euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 0
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 1euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::1euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 1
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 2euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::2euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 2
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 3euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::3euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 3
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 4euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::4euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 4
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 5euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::5euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 5
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 6euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::6euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 6
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 7euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::7euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 7
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 8euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::8euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 8
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: 9euwestswh
api_secret_key: "%{hiera('swh::azure::credentials::9euwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: 9
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: aeuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::aeuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: a
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: beuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::beuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: b
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: ceuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::ceuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: c
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: deuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::deuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: d
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: eeuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::eeuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: e
- cls: filtered
args:
storage_conf:
cls: azure-storage
args:
account_name: feuwestswh
api_secret_key: "%{hiera('swh::azure::credentials::feuwestswh')}"
container_name: contents
filters_conf:
- type: prefix
prefix: f
swh::deploy::worker::swh_indexer::orchestrator::concurrency: 2
swh::deploy::worker::swh_indexer::orchestrator::loglevel: info
swh::deploy::worker::swh_indexer::orchestrator::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::orchestrator::config:
indexers:
- mimetype
check_presence: false
swh::deploy::worker::swh_indexer::orchestrator_text::concurrency: 2
swh::deploy::worker::swh_indexer::orchestrator_text::loglevel: info
swh::deploy::worker::swh_indexer::orchestrator_text::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::orchestrator_text::config:
indexers:
- language
- ctags
- fossology_license
check_presence: false
swh::deploy::worker::swh_indexer::base::concurrency: 2
swh::deploy::worker::swh_indexer::base::loglevel: info
# Contains a password: in private data
swh::deploy::worker::swh_indexer::base::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
# objstorage configuration from swh::azure_objstorage::config is merged in the manifest
swh::deploy::worker::swh_indexer::base::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
swh::deploy::worker::swh_indexer::mimetype::concurrency: 2
swh::deploy::worker::swh_indexer::mimetype::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::mimetype::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
# objstorage configuration from swh::azure_objstorage::config is merged in the manifest
swh::deploy::worker::swh_indexer::mimetype::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
workdir: /tmp/swh/indexer.mimetype/
tool:
name: file
version: 5.22
command: file
swh::deploy::worker::swh_indexer::fossology_license::concurrency: 2
swh::deploy::worker::swh_indexer::fossology_license::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::fossology_license::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
# objstorage configuration from swh::azure_objstorage::config is merged in the manifest
swh::deploy::worker::swh_indexer::fossology_license::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
workdir: /tmp/swh/indexer.fossology.license/
tool:
name: nomos
version: 3.1.0rc2-31-ga2cbb8c
command: /usr/bin/nomossa
swh::deploy::worker::swh_indexer::language::concurrency: 2
swh::deploy::worker::swh_indexer::language::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::language::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
swh::deploy::worker::swh_indexer::language::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
workdir: /tmp/swh/indexer.language/
tool:
name: pygments
version: 2.0.1+dfsg-1.1+deb8u1
swh::deploy::worker::swh_indexer::ctags::concurrency: 2
swh::deploy::worker::swh_indexer::ctags::loglevel: "%{hiera('swh::deploy::worker::swh_indexer::base::loglevel')}"
# Contains a password: in private data
swh::deploy::worker::swh_indexer::ctags::task_broker: "%{hiera('swh::deploy::worker::task_broker')}"
# objstorage configuration from swh::azure_objstorage::config is merged in the manifest
swh::deploy::worker::swh_indexer::ctags::config:
storage:
cls: remote
args:
url: http://uffizi.internal.softwareheritage.org:5002/
workdir: /tmp/swh/indexer.ctags/
tool:
name: universal-ctags
version: ~git7859817b
command: /usr/bin/ctags
languages:
abap: ''
abnf: ''
actionscript: ''
actionscript-3: ''
ada: Ada
adl: ''
agda: ''
alloy: ''
ambienttalk: ''
antlr: ''
antlr-with-actionscript-target: ''
antlr-with-c#-target: ''
antlr-with-cpp-target: ''
antlr-with-java-target: ''
antlr-with-objectivec-target: ''
antlr-with-perl-target: ''
antlr-with-python-target: ''
antlr-with-ruby-target: ''
apacheconf: ''
apl: ''
applescript: ''
arduino: ''
aspectj: ''
aspx-cs: ''
aspx-vb: ''
asymptote: ''
autohotkey: ''
autoit: ''
awk: Awk
base-makefile: Make
bash: Sh
bash-session: Sh
batchfile: DosBatch
bbcode: ''
bc: ''
befunge: ''
blitzbasic: Basic
blitzmax: ''
bnf: ''
boo: ''
boogie: ''
brainfuck: ''
bro: ''
bugs: ''
c: C
c#: C#
c++: C++
c-objdump: asm
ca65-assembler: asm
cadl: ''
camkes: ''
cbm-basic-v2: ''
ceylon: Java
cfengine3: ''
cfstatement: ''
chaiscript: ''
chapel: ''
cheetah: ''
cirru: ''
clay: ''
clojure: Clojure
clojurescript: Clojure
cmake: Make
cobol: Cobol
cobolfree: Cobol
coffeescript: CoffeeScript
coldfusion-cfc: HTML
coldfusion-html: HTML
common-lisp: Lisp
component-pascal: Pascal
coq: ''
cpp-objdump: Asm
cpsa: ''
crmsh: Sh
croc: ''
cryptol: ''
csound-document: ''
csound-orchestra: ''
csound-score: ''
css: CSS
css+django/jinja: CSS
css+genshi-text: CSS
css+lasso: CSS
css+mako: CSS
css+mozpreproc: CSS
css+myghty: CSS
css+php: CSS
css+ruby: CSS
css+smarty: CSS
cuda: ''
cypher: ''
cython: Python
d: D
d-objdump: Asm
darcs-patch: Diff
dart: ''
debian-control-file: ''
debian-sourcelist: ''
delphi: ''
dg: ''
diff: Diff
django/jinja: Python
docker: Iniconf
dtd: ''
duel: ''
dylan: ''
dylan-session: ''
dylanlid: ''
earl-grey: ''
easytrieve: ''
ebnf: ''
ec: ''
ecl: ''
eiffel: Eiffel
elixir: ''
elixir-iex-session: ''
elm: ''
emacslisp: Lisp
embedded-ragel: ''
erb: Ruby
erlang: Erlang
erlang-erl-session: Erlang
evoque: ''
ezhil: ''
factor: ''
fancy: ''
fantom: ''
felix: ''
fish: ''
fortran: Fortran
fortranfixed: Fortran
nfoxpro: ''
fsharp: Ocaml
gap: ''
gas: ''
genshi: ''
genshi-text: ''
gettext-catalog: ''
gherkin: ''
glsl: ''
gnuplot: ''
go: Go
golo: ''
gooddata-cl: ''
gosu: ''
gosu-template: ''
groff: ''
groovy: ''
haml: ''
handlebars: ''
haskell: ''
haxe: ''
hexdump: ''
html: HTML
html+cheetah: HTML
html+django/jinja: HTML
html+evoque: HTML
html+genshi: HTML
html+handlebars: HTML
html+lasso: HTML
html+mako: HTML
html+myghty: HTML
html+php: HTML
html+smarty: HTML
html+twig: HTML
html+velocity: HTML
http: ''
hxml: ''
hy: Lisp
hybris: ''
idl: ''
idris: ''
igor: ''
inform-6: ''
inform-6-template: ''
inform-7: ''
ini: Iniconf
io: ''
ioke: ''
irc-logs: ''
isabelle: ''
j: ''
jade: ''
jags: ''
jasmin: ''
java: Java
java-server-page: Java
javascript: JavaScript
javascript+cheetah: JavaScript
javascript+django/jinja: JavaScript
javascript+genshi-text: JavaScript
javascript+lasso: JavaScript
javascript+mako: JavaScript
javascript+mozpreproc: JavaScript
javascript+myghty: JavaScript
javascript+php: JavaScript
javascript+ruby: JavaScript
javascript+smarty: JavaScript
jcl: ''
json: JSON
json-ld: JSON
julia: ''
julia-console: ''
kal: ''
kconfig: ''
koka: ''
kotlin: ''
lasso: ''
lean: ''
lesscss: CSS
lighttpd-configuration-file: Iniconf
limbo: ''
liquid: ''
literate-agda: ''
literate-cryptol: ''
literate-haskell: ''
literate-idris: ''
livescript: ''
llvm: ''
logos: ''
logtalk: ''
lsl: ''
lua: Lua
makefile: Make
mako: ''
maql: ''
mask: ''
mason: ''
mathematica: MatLab
matlab: MatLab
matlab-session: MatLab
minid: ''
modelica: ''
modula-2: ''
moinmoin/trac-wiki-markup: ''
monkey: ''
moocode: ''
moonscript: ''
mozhashpreproc: ''
mozpercentpreproc: ''
mql: ''
mscgen: ''
msdos-session: ''
mupad: ''
mxml: ''
myghty: ''
mysql: SQL
nasm: Asm
nemerle: ''
nesc: ''
newlisp: Lisp
newspeak: ''
nginx-configuration-file: ''
nimrod: ''
nit: ''
nix: ''
nsis: ''
numpy: ''
objdump: Asm
objdump-nasm: Asm
objective-c: ObjectiveC
objective-c++: Objective-C
objective-j: ''
ocaml: Ocaml
octave: ''
odin: ''
ooc: ''
opa: ''
openedge-abl: ''
pacmanconf: ''
pan: ''
parasail: ''
pawn: ''
perl: Perl
perl6: Perl6
php: PHP
pig: ''
pike: ''
pkgconfig: ''
pl/pgsql: SQL
postgresql-console-(psql): ''
postgresql-sql-dialect: SQL
postscript: ''
povray: ''
powershell: ''
powershell-session: ''
praat: ''
prolog: ''
properties: Iniconf
protocol-buffer: Protobuf
puppet: ''
pypy-log: ''
python: Python
python-3: Python
python-3.0-traceback: Python
python-console-session: Python
python-traceback: Python
qbasic: ''
qml: ''
qvto: ''
racket: LISP
ragel: ''
ragel-in-c-host: ''
ragel-in-cpp-host: ''
ragel-in-d-host: ''
ragel-in-java-host: ''
ragel-in-objective-c-host: ''
ragel-in-ruby-host: ''
raw-token-data: ''
rconsole: ''
rd: ''
rebol: ''
red: ''
redcode: ''
reg: ''
resourcebundle: ''
restructuredtext: reStructuredText
rexx: REXX
rhtml: ''
roboconf-graph: ''
roboconf-instances: ''
robotframework: ''
rpmspec: RpmSpec
rql: ''
rsl: ''
ruby: Ruby
ruby-irb-session: Sh
rust: Rust
s: ''
sass: ''
scala: Java
scalate-server-page: ''
scaml: SML
scheme: Lisp
scilab: ''
scss: ''
shen: ''
slim: ''
smali: ''
smalltalk: ''
smarty: ''
snobol: ''
sourcepawn: ''
sparql: ''
sql: SQL
sqlite3con: SQL
squidconf: ''
stan: ''
standard-ml: SML
supercollider: ''
swift: ''
swig: ''
systemverilog: SystemVerilog
tads-3: ''
tap: ''
tcl: ''
tcsh: Sh
tcsh-session: Sh
tea: ''
termcap: ''
terminfo: ''
terraform: ''
tex: Tex
text-only: ''
thrift: ''
todotxt: ''
trafficscript: ''
treetop: ''
turtle: ''
twig: ''
typescript: ''
urbiscript: ''
vala: ''
vb.net: Basic
vctreestatus: ''
velocity: ''
verilog: Verilog
vgl: ''
vhdl: VHDL
viml: Vim
x10: ''
xml: ''
xml+cheetah: ''
xml+django/jinja: ''
xml+evoque: ''
xml+lasso: ''
xml+mako: ''
xml+myghty: ''
xml+php: ''
xml+ruby: ''
xml+smarty: ''
xml+velocity: ''
xquery: ''
xslt: XSLT
xtend: ''
xul+mozpreproc: ''
yaml: ''
yaml+jinja: ''
zephir: Zephir
unknown: ''
desktop::printers:
MFP_C:
uri: lpd://print.paris.inria.fr/MFP_C-pro
description: Impression couleur
location: Partout
ppd: "%{hiera('desktop::printers::ppd_dir')}/MFP_Paris.ppd"
ppd_options:
ColorType: Color
MFP:
uri: lpd://print.paris.inria.fr/MFP-pro
description: Impression Noir et Blanc
location: Partout
ppd: "%{hiera('desktop::printers::ppd_dir')}/MFP_Paris.ppd"
ppd_options:
ColorType: Mono
desktop::printers::default: MFP
desktop::printers::ppd_dir: /usr/share/ppd/softwareheritage
desktop::printers::cups_usernames:
ardumont: andumont
morane: mgruenpe
olasd: ndandrim
seirl: apietri
zack: zacchiro
zookeeper::hosts:
getty.internal.softwareheritage.org: '1'
zookeeper::data_dir: /var/lib/zookeeper
kafka::log_dirs:
- /srv/kafka/logdir
kafka::brokers:
getty.internal.softwareheritage.org:
id: 1
kafka::zookeeper::hosts:
- getty.internal.softwareheritage.org:2181
kafka::zookeeper::chroot: '/kafka/softwareheritage'
stats_export::vhost::name: stats.export.softwareheritage.org
stats_export::vhost::docroot: "/var/www/%{hiera('stats_export::vhost::name')}"
stats_export::vhost::ssl_protocol: "%{hiera('apache::ssl_protocol')}"
stats_export::vhost::ssl_honorcipherorder: "%{hiera('apache::ssl_honorcipherorder')}"
stats_export::vhost::ssl_cipher: "%{hiera('apache::ssl_cipher')}"
stats_export::vhost::hsts_header: "%{hiera('apache::hsts_header')}"
postgresql::apt_config::pgdg::mirror: 'http://apt.postgresql.org/pub/repos/apt/'
postgresql::apt_config::pgdg::keyid: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8
postgresql::apt_config::pgdg::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1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=s3DI
-----END PGP PUBLIC KEY BLOCK-----
postgresql::apt_config::pglogical::mirror: 'http://packages.2ndquadrant.com/pglogical/apt/'
postgresql::apt_config::pglogical::keyid: 855AF5C7B897656417FA73D65D941908AA7A6805
postgresql::apt_config::pglogical::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.12 (GNU/Linux)
mQENBFUQs34BCADT3W0Nnf0E0/2LGU4Afzg4dAViJqqhOLBwuWUS6Np+ZqCK6beY
E46KS/CowwBmca9stm5oJbcpz2WCNxnb6OGlgxQnYEaVl4z6bDRDJ3BdiIbcjdYM
cutJupmZbrlvfnf30AcQXc6RCZ/x/53CDuCXyrO7djkBkoolJFQbzfy0HcRnNRVp
x3LrsTkTaajDwsenRjq5NJDAnVaMvq+Jmsl0pJoIbiPNIUA2oNKptINlZWIvS7Ha
LYT6sLZxWwuUYhbrpb2EiF8Gx3D4WYf6Wm2h6GLYZkKIagfTsvN/tRPw+5SvIMAd
yVeVWbu77k0i8Om+RQ6wA1FOtZbAVfp8/YxrABEBAAG0P0JEUiBBcHQgU2lnbmlu
ZyBLZXkgZm9yIDJuZFF1YWRyYW50IDxwYWNrYWdlcnNAMm5kcXVhZHJhbnQuY29t
PokBPQQTAQoAJwUCVRCzfgIbAwUJA8JnAAULCQgHAwUVCgkICwUWAgMBAAIeAQIX
gAAKCRBdlBkIqnpoBbYwB/4j/BBbqpSxxX9u1tlv/LodIiYKEM5NXn1Pty8qgHqg
H3PcFjCGgLR6jmC4rMe+rFQIax4C8TmUgyTIdSXu4RsuZBiq2lGrsutEBEdSkEdW
g5OF5oSbd69W97GFkwi4eDdvl0itY5599RnMuXD7la4k4P4A7FaYCjgTgKnBnAT+
PEvfdvOIx7w87ro6+fgyNoWVa682/kxQaLkKhP6w1uASKDprCH5xproxkzXFFpu3
9PU1Ej9klF8UJ0QetlYGDcWa1psPiTS1CB2bdPbJWRhE0ZZbe2N6/F0n0j9Fixqc
npc+sP1uCsVbsfLAMMHYCqzfhXZhsplgUWHcsAPrc5eBiQIcBBABCgAGBQJVELYU
AAoJEGcmXMcrEeBUynkP/1Nar3HjCZ81TguJB8w1iFjqL9uhV3dqaaoBnf5NVcOh
Ft3Ymdeu+jYKkMMqojCN1J+hdnYsFhdmTKWNogWwT7IOXuyEEk5tm4IC+CfKh+OI
1kRs9lGeNpLt/7/R5FP4CXMWC7/Q7h8eRzuRpOTsBDHhSYaHq+SkCpNW+gKvEL8R
2hTEQQTgGkRsGLM1RwxRAr7wAw+GXPM06JRe31W8frqE3tNOAQwvXEuQeM19kon2
ee+mzKL8MguprHa/lYMBWOsaf5/3MixZO8xYGehOu2mDJvt+JwVQvkP1y4uCyNEh
jeeSs1xGoQ592+b22kZz0uWJyuBooEpYtOYUCdhJCqDdc0pPZl+eI91BzSQU9fen
PDZfKmOmLmySnNgvfUH7+g+n6M0wUYUQgESiKQbjM9b5kZBuDF/15HeGXP6HlIXA
ziPDxWUPMJDDcSO4P/WNaPuNnp26fkZmcxX01/UcXqwfj1o/tMEOA4pzcsg7GeXD
cMYXciyFZ5Mzs1C+dpR72zkX8p+H76PNARTCR+TvKbO5gU3RxMQ0o7GcGXHUEllf
zy90zqfbY7vG6BFXPsQEXczZfwKgex9ikHQHtxs0NbDlPDfDNO91PmfMyf83KDN0
6mUuMvn1xVb66nxMaq8O4JkCJ/mTSo7IGjaZrua/JSJrXWa03UcmRbYMUmITrFw/
uQENBFUQs34BCAC8FxMXv+UBEnLk1qcayhSsECnatkAoDDaKjuUWc7mPBhcwo6C3
buFbPtHRKV88uAYy8MtY291+zMeO+ZVD6bOVnmXvs/HD6Hn9XIq8DX4LBNu1kKyc
xQ8BghJCpb5qQgDaxgYItWMI66xdaHlPyIhyCZGuv9Dx6T4gR6PUdRLy9kVR1V60
3B0LHhBbYjSLb6aAmc8wo7uJJuToN6L/FxKM2asV9L7uacmaq5JhY658LFBexhaT
Quih6JYFW3DHxtW527+SlwXEPtpDrQIvE5hJqrDQX22hF/oiS+gnIE2T22aCIr6+
Cwdxys/l104qjcS5YV2TDujsmHOsvCCL7/QFABEBAAGJASUEGAEKAA8FAlUQs34C
GwwFCQPCZwAACgkQXZQZCKp6aAUMcAf9EC4t33IZIpwS5rYeTfeu+vFS9TSUhlY6
poydbpYuVfYbIgFYKc2TQkOu3XMzV6irsDBuPEFunXoek6bLeWOrde/x4Einfo5C
iztixzrBzvjIQ4Ti/WYrQEs1uXzsnLcBr3KkhPZIpzeDmJtVlNyyEpKLmjtVI3D9
5/Sdjlv+lP6k1jCogksLuwC3hUeWhpY5O6InGlPDHIUl5+wEU2j0OdE6LeHmtdJ7
GM/dyd2H1HaKL37dMATrCHpYxUywnP/L1P7Lrwnm+1D6YImUAhzxjAOC5ErkIB1q
/FGLWB0fg1+djZ01rQRIKJTwzMmxHoUnCmUv7xWfA/bYyFvp0JBWWA==
=2rpV
-----END PGP PUBLIC KEY BLOCK-----
icinga2::apt_config::mirror: 'http://packages.icinga.com/debian'
icinga2::apt_config::keyid: F51A91A5EE001AA5D77D53C4C6E319C334410682
icinga2::apt_config::key: |
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.19 (GNU/Linux)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=icbY
-----END PGP PUBLIC KEY BLOCK-----
+icinga2::role: agent
+
icinga2::master::zonename: master
icinga2::master::db::username: icinga2
# icinga2::master::db::password in private data
icinga2::master::db::database: icinga2
icinga2::parent_zone: master
icinga2::parent_endpoints:
pergamon.softwareheritage.org:
host: 192.168.100.29
icinga2::network: 192.168.100.0/23
icinga2::features:
- checker
- mainlog
icinga2::host::vars:
os: Linux
cores: "%{::processorcount}"
virtual_machine: "%{::is_virtual}"
distro: "%{::operatingsystem}"
disks:
'disk /':
disk_partitions: '/'
systemd_journal::role: sender
systemd_journal::upload_url: https://pergamon.internal.softwareheritage.org:19532
redis::server::bind: 127.0.0.1
redis::server::port: 6379
# redis::server::password in private data
diff --git a/data/hostname/pergamon.softwareheritage.org.yaml b/data/hostname/pergamon.softwareheritage.org.yaml
index 456ac8ee..c2ea7a2b 100644
--- a/data/hostname/pergamon.softwareheritage.org.yaml
+++ b/data/hostname/pergamon.softwareheritage.org.yaml
@@ -1,36 +1,38 @@
dns::local_cache: false
smtp::relay_destinations:
"%{hiera('phabricator::vhost::name')}": smtp:[tate.internal.softwareheritage.org]
networks:
private:
interface: eth1
address: 192.168.100.29
netmask: 255.255.255.0
gateway: 192.168.100.1
default:
interface: eth0
address: 128.93.193.29
netmask: 255.255.255.0
gateway: 128.93.193.254
# For now the puppetmaster vhost is not puppet-managed
apache::purge_configs: false
apache::purge_vhost_dir: false
# Set apache MPM to prefork
apache::mpm_module: prefork
dar::backup::exclude:
- srv/softwareheritage/annex/annexroot
+icinga2::role: master
+
icinga2::features:
- checker
- mainlog
- notification
- statusdata
- compatlog
- command
systemd_journal::role: collector
File Metadata
Details
Attached
Mime Type
text/x-diff
Expires
Sat, Jun 21, 6:10 PM (1 w, 6 d ago)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3337990
Attached To
rSPSITE puppet-swh-site
Event Timeline
Log In to Comment