---
user_ssh_key: [ '{{ claudio_atzori }}' ]


# logstash
logstash_collector_host: logstash.t.hadoop.research-infrastructures.eu
logstash_collector_listen_port: 5544
logstash_version: 1.3.3
logstash_file: 'logstash-{{ logstash_version }}-flatjar.jar'
logstash_url: 'download.elasticsearch.org/logstash/logstash/{{ logstash_file }}'
logstash_install_dir: /opt/logstash
logstash_conf_dir: '{{ logstash_install_dir }}/etc'
logstash_lib_dir: '{{ logstash_install_dir }}/share'
logstash_log_dir: /var/log/logstash
logstash_user: logstash
logstash_indexer_jvm_opts: "-Xms2048m -Xmx2048m"

kibana_nginx_conf: kibana
kinaba_nginx_root: /var/www/kibana/src
kibana_virtual_host: logs.t.hadoop.research-infrastructures.eu

elasticsearch_user: elasticsearch
elasticsearch_group: elasticsearch
elasticsearch_version: 1.0.0
elasticsearch_http_port: 9200
elasticsearch_transport_tcp_port: 9300
elasticsearch_download_path: download.elasticsearch.org/elasticsearch/elasticsearch
elasticsearch_cluster: hadoop-logstash
elasticsearch_node_name: logstash
elasticsearch_node_master: "true"
elasticsearch_node_data: "true"
elasticsearch_max_local_storage_nodes: 1
elasticsearch_log_dir: /var/log/elasticsearch
elasticsearch_heap_size: 5
elasticsearch_host: localhost
elasticsearch_curator_close_after: 10
elasticsearch_curator_retain_days: 20
elasticsearch_curator_optimize_days: 10
elasticsearch_curator_bloom_days: 7
elasticsearch_curator_timeout: 1200
elasticsearch_curator_manage_marvel: True
elasticsearch_disable_dynamic_scripts: True

# We use the nginx defaults here
nginx_use_ldap_pam_auth: True

iptables:
  tcp_rules: True
  tcp:
    - { port: '{{ logstash.collector_listen_port }}', allowed_hosts: [ '{{ network.nmis }}' ] }
    - { port: '{{ elasticsearch.http_port }}', allowed_hosts: [ '{{ ansible_fqdn }}', '{{ network.isti }}', '{{ network.nmis }}', '{{ network.eduroam }}' ] }
    - { port: '80', allowed_hosts: [ '{{ network.isti }}', '{{ network.nmis }}', '{{ network.eduroam }}' ] }