system-config/inventory/service/group_vars/review.yaml
Clark Boylan 25de34e908 Bind mount Gerrit's review_site/data dir
The replication, manage-plugins, and delete-project plugins all seem to
want to write content out to /var/gerrit/data within the Gerrit
container. At /home/gerrit2/review_site/data we've got an old carried
over dir from previous installations but this does not appear to be bind
mounted.

Best I can tell the replication plugin may use this disk location to
keep track of tasks that are queued,running,etc and this may work around
the issues with autoreloading gerrit replication configs. However, we
don't get those benefits when we delete the container (as with
docker-compose down/up-d) as the content is ephemeral within the
container. Address this by bind mounting the location along with the
other bind mounts.

Note I have excluded this from backups as I think we don't need backups
of things like replication queues. That said depending on what the other
plugins use this for we may need to refine our backup rules in the
future.

Change-Id: If3a91aeb1bd86c8514179b8ecfde17e98c29af6a
2023-02-27 13:14:34 -08:00

29 lines
994 B
YAML

exim_extra_aliases:
gerrit2: root
iptables_rules:
- -p tcp --syn --dport 29418 -m connlimit --connlimit-above 100 -j LOG
- -p tcp --syn --dport 29418 -m connlimit --connlimit-above 100 -j REJECT
iptables_extra_public_tcp_ports:
- 80
- 443
- 29418
gerrit_vhost_name: review.opendev.org
gerrit_redirect_vhost: review.openstack.org
gerrit_storyboard_url: https://storyboard.openstack.org
# We have to set the letsencrypt_gid to something that isn't 3000
# to not conflict with gerrit2's gid.
# Also, on review01.openstack.org, 3001 is openstackwatch and
# 3002 is github.
letsencrypt_gid: 3003
borg_backup_excludes_extra:
- /home/gerrit2/.launchpadlib/cache/*
- /home/gerrit2/review_site/cache/*
- /home/gerrit2/review_site/data/*
- /home/gerrit2/review_site/tmp/*
- /home/gerrit2/review_site/index/*
# scratch location for admins
- /home/gerrit2/tmp/*
# live db when used with mariadb_container; dumped by separate job
# using mysqldump
- /home/gerrit2/reviewdb/*