contact: &contact xvm@mit.edu
adminacl: &adminacl system:xvm-root
priv_contact: &priv_contact xvm-root@mit.edu

apt:
 keyid: 35AE3C4F

authz:
 mech: invirt.authz.locker
 afs:
  cells:
  - cell: athena.mit.edu
    auth: yes
  - cell: sipb.mit.edu
    auth: yes
  - cell: zone.mit.edu
    auth: yes
  - cell: ops.mit.edu
    auth: no
  - cell: net.mit.edu
    auth: no
  - cell: dev.mit.edu
    auth: no

console:
 hostname: xvm-console.mit.edu
 ip: 18.181.0.134

db:
 uri: postgres://invirt@xvm.mit.edu/invirt
 host: xvm.mit.edu
 ip: 18.181.0.62
 port: 5432
 user: invirt
 dbname: invirt

dhcp:
 gateway: 18.181.0.1
 netmask: 255.255.0.0
 dns:
  - 18.70.0.160
  - 18.71.0.151
  - 18.72.0.3
 search_domain: mit.edu

dns:
 contact: *contact
 domains: # first one is advertised
  - xvm.mit.edu
  - 2.181.18.in-addr.arpa
 nameservers:
  - hostname: xvm.mit.edu
    ip: 18.181.0.62
 zone_files:
  - /etc/invirt/zone

git:
 pockets:
  prod:
   acl: *adminacl
   apt: stable
  dev:
   acl: system:xvm-dev
   apt: unstable
   allow_backtracking: yes
 tagger:
  name: Invirt Build Server
  email: invirt@mit.edu

hosts: # hosts on which VMs run
 - hostname: citadel-station.mit.edu
   ip: 18.181.0.221
 - hostname: aperture-science.mit.edu
   ip: 18.181.0.222
 - hostname: shadow-moses.mit.edu
   ip: 18.181.0.223
 - hostname: arklay-mansion.mit.edu
   ip: 18.181.0.224

kerberos:
 realm: ATHENA.MIT.EDU

mail:
 forward: *priv_contact

monitoring:
 - hostname: syn.mit.edu
   ip: 18.181.0.65

remote:
 hostname: xvm-remote.mit.edu
 ip: 18.181.0.188

svn:
 repopath: /afs/sipb.mit.edu/project/xvm/svn
 uri: https://xvm.mit.edu:1111

trac:
 uri: https://xvm.scripts.mit.edu

vnc:
 base_port: 10003
 proxy_ip: 18.181.0.62

web:
 baseuri: https://xvm.mit.edu/
 hostname: xvm.mit.edu
 errormail: *contact
 errormail_exclude:
  - broder
  - price
  - ecprice
  - andersk
  - quentin
  - hartmans

xen:
 network:
  iface: eth2