source: trunk/packages/xvm-prodconfig/master.yaml @ 2572

Last change on this file since 2572 was 2557, checked in by broder, 15 years ago

Re-arrange the authz configuration.

In particular, even if we allow for mixing of multiple authz
mechanisms at some point, you won't have multiple instances of the
locker authz type, so the "type" shouldn't be a property of each of
the cells we specify how to authenticate against.
File size: 1.7 KB
RevLine 
[2216]1contact: &contact xvm@mit.edu
[2504]2adminacl: &adminacl system:xvm-root
[2278]3priv_contact: &priv_contact xvm-root@mit.edu
[2216]4
[1834]5apt:
6 keyid: 35AE3C4F
7
[724]8authz:
[2557]9 mech: invirt.authz.locker
10 cells:
11 - cell: athena.mit.edu
[2118]12   auth: yes
[2557]13 - cell: sipb.mit.edu
[2118]14   auth: yes
[724]15
[1834]16console:
17 hostname: xvm-console.mit.edu
18 ip: 18.181.0.134
[724]19
[845]20db:
[1643]21 uri: postgres://invirt@xvm.mit.edu/invirt
22 host: xvm.mit.edu
23 ip: 18.181.0.62
[845]24 port: 5432
[1298]25 user: invirt
26 dbname: invirt
[724]27
[1834]28dhcp:
29 gateway: 18.181.0.1
30 netmask: 255.255.0.0
31 dns:
32  - 18.70.0.160
33  - 18.71.0.151
34  - 18.72.0.3
35 search_domain: mit.edu
[979]36
[999]37dns:
[2216]38 contact: *contact
[999]39 domains: # first one is advertised
[1643]40  - xvm.mit.edu
[2205]41  - 2.181.18.in-addr.arpa
[999]42 nameservers:
[1643]43  - hostname: xvm.mit.edu
44    ip: 18.181.0.62
[1480]45 zone_files:
46  - /etc/invirt/zone
[999]47
[2497]48git:
[2514]49 pockets:
[2497]50  prod:
51   acl: *adminacl
[2514]52   apt: stable
[2497]53  dev:
54   acl: system:xvm-dev
[2514]55   apt: unstable
56   allow_backtracking: yes
[2505]57 tagger:
58  name: Invirt Build Server
59  email: invirt@mit.edu
[2497]60
[1834]61hosts: # hosts on which VMs run
62 - hostname: citadel-station.mit.edu
63   ip: 18.181.0.221
64 - hostname: aperture-science.mit.edu
65   ip: 18.181.0.222
66 - hostname: shadow-moses.mit.edu
67   ip: 18.181.0.223
68 - hostname: arklay-mansion.mit.edu
69   ip: 18.181.0.224
[1032]70
[1835]71kerberos:
[1843]72 realm: ATHENA.MIT.EDU
[1835]73
[2278]74mail:
75 forward: *priv_contact
76
[1834]77monitoring:
78 - hostname: syn.mit.edu
79   ip: 18.181.0.65
[944]80
[1834]81remote:
82 hostname: xvm-remote.mit.edu
83 ip: 18.181.0.188
[993]84
[944]85svn:
86 repopath: /afs/sipb.mit.edu/project/xvm/svn
[1643]87 uri: https://xvm.mit.edu:1111
[944]88
89trac:
[1675]90 uri: https://xvm.scripts.mit.edu
[1056]91
92vnc:
[1060]93 base_port: 10003
[1643]94 proxy_ip: 18.181.0.62
[1760]95
[1834]96web:
97 baseuri: https://xvm.mit.edu/
98 hostname: xvm.mit.edu
[2216]99 errormail: *contact
[1834]100 errormail_exclude:
101  - broder
102  - price
103  - ecprice
104  - andersk
105  - quentin
106  - hartmans
[2055]107
108xen:
109 network:
110  iface: eth2
Note: See TracBrowser for help on using the repository browser.