---
  zsh_ver: 5.7.1
  zsh_src_url: "https://www.zsh.org/pub/old/zsh-{{ zsh_ver }}.tar.xz"
  yum_repo_files: []
  pkg_list: []
  slurm_version: 18.08.9
  enable_slurm_client: false

# NHC related
  nhc_download_url: "https://github.com/mej/nhc/releases/download/1.4.3/lbnl-nhc-1.4.3-1.el7.noarch.rpm"
  nhc_download_path: "/tmp"
  nhc_git_repo: "https://gitlab.rc.uab.edu/rc/nhc.git"
  nhc_git_repo_path: "/tmp/nhc"

  root_ssh_key: ""

# cheaha.node related
  hostname_lookup_table:
    - "10.141.255.254 master.cm.cluster master localmaster.cm.cluster localmaster ldapserver.cm.cluster ldapserver"
  domain_search_list:
    - openstack.internal
    - cm.cluster
  nameserver_list:
    - 10.141.255.254

# ldap_config related
  ldap_cert_path: "/etc/openldap/certs"
  ldap_uri: "ldap://ldapserver"

# nfs_mounts related
  enable_nfs_mounts: true
  use_autofs: false
  use_fstab: false
  mount_points:
    - { "src": "master:/gpfs4", "path": "/gpfs4", "opts": "ro,sync,hard", "mode": "0755" }
    - { "src": "master:/gpfs5", "path": "/gpfs5", "opts": "ro,sync,hard", "mode": "0755" }
  autofs_mounts:
    - { "src": "master:/gpfs4/&", "path": "/gpfs4", "opts": "fstype=nfs,vers=3,_netdev,default", "mode": '0755', "mount_point": "/gpfs4", "map_name": "gpfs4", key: "*" }
    - { "src": "master:/gpfs5/&", "path": "/gpfs5", "opts": "fstype=nfs,vers=3,_netdev,default", "mode": '0755', "mount_point": "/gpfs5", "map_name": "gpfs5", key: "*" }

#SSH Host Keys
  S3_ENDPOINT: ""
  SSH_HOST_KEYS_S3_BUCKET: ""
  SSH_HOST_KEYS_S3_OBJECT: ""

# AWS credentials
  LTS_ACCESS_KEY: ""
  LTS_SECRET_KEY: ""

# ssh proxy
  enable_ssh_proxy_config: false
  sshpiper_dest_dir: "/opt/sshpiper"
  fail2ban_cidr_list: "127.0.0.1/8"

# rsyslog
  enable_rsyslog_config: false
  rsyslog_target: "*.* @master:514"

# ssl certs
  enable_ssl_certs: false
  ssl_cert_s3_bucket: ""
  ssl_cert_key_location: "/etc/pki/tls/private"
  ssl_cert_file_location: "/etc/pki/tls/certs"
  ssl_cert_key: ""
  ssl_cert_file: ""
  ssl_cert_chain_file: ""
  ssl_apache_config: ""
  apache_service: "httpd"

# rewrite map
  enable_rewrite_map: false
  target_groups:
    - {"name": "gpfs4", "host": "login001", "default": True }
    - {"name": "gpfs5", "host": "login002", "default": False }

# account app
  account_app_port: 8000

# fail2ban
  enable_fail2ban: true
  maxretry: 1
  findtime: 600
  bantime: 1200