Move XVM's locker authorization code into a separate xvm-authz-locker
[invirt/packages/xvm-prodconfig.git] / master.yaml
1 contact: &contact xvm@mit.edu
2 adminacl: &adminacl system:xvm-root
3 priv_contact: &priv_contact xvm-root@mit.edu
4
5 apt:
6  keyid: 35AE3C4F
7
8 authz:
9  mech: xvm.authz.locker
10  afs:
11   cells:
12   - cell: athena.mit.edu
13     auth: yes
14   - cell: sipb.mit.edu
15     auth: yes
16   - cell: zone.mit.edu
17     auth: yes
18   - cell: ops.mit.edu
19     auth: no
20   - cell: net.mit.edu
21     auth: no
22   - cell: dev.mit.edu
23     auth: no
24
25 build:
26  pockets:
27   prod:
28    acl: *adminacl
29    apt: stable
30   dev:
31    acl: system:xvm-dev
32    apt: unstable
33    allow_backtracking: yes
34  tagger:
35   name: Invirt Build Server
36   email: invirt@mit.edu
37
38 console:
39  hostname: xvm-console.mit.edu
40  ip: 18.181.0.134
41
42 db:
43  uri: postgres://invirt@xvm.mit.edu/invirt
44  host: xvm.mit.edu
45  ip: 18.181.0.62
46  port: 5432
47  user: invirt
48  dbname: invirt
49
50 dhcp:
51  gateway: 18.181.0.1
52  netmask: 255.255.0.0
53  dns:
54   - 18.70.0.160
55   - 18.71.0.151
56   - 18.72.0.3
57  search_domain: mit.edu
58
59 dns:
60  contact: *contact
61  domains: # first one is advertised
62   - xvm.mit.edu
63   - 2.181.18.in-addr.arpa
64  nameservers:
65   - hostname: xvm.mit.edu
66     ip: 18.181.0.62
67  zone_files:
68   - /etc/invirt/zone
69
70 hosts: # hosts on which VMs run
71  - hostname: citadel-station.mit.edu
72    ip: 18.181.0.221
73  - hostname: aperture-science.mit.edu
74    ip: 18.181.0.222
75  - hostname: shadow-moses.mit.edu
76    ip: 18.181.0.223
77  - hostname: arklay-mansion.mit.edu
78    ip: 18.181.0.224
79
80 kerberos:
81  realm: ATHENA.MIT.EDU
82
83 mail:
84  forward: *priv_contact
85
86 monitoring:
87  - hostname: syn.mit.edu
88    ip: 18.181.0.65
89
90 remote:
91  hostname: xvm-remote.mit.edu
92  ip: 18.181.0.188
93
94 svn:
95  repopath: /afs/sipb.mit.edu/project/xvm/svn
96  uri: https://xvm.mit.edu:1111
97
98 trac:
99  uri: https://xvm.scripts.mit.edu
100
101 vnc:
102  base_port: 10003
103  proxy_ip: 18.181.0.62
104
105 web:
106  baseuri: https://xvm.mit.edu/
107  hostname: xvm.mit.edu
108  errormail: *contact
109  errormail_exclude:
110   - broder
111   - price
112   - ecprice
113   - andersk
114   - quentin
115   - hartmans
116
117 xen:
118  network:
119   iface: eth2