Synnefo

## -*- coding: utf-8 -*-

##

## API configuration

######################

#

#

#DEBUG = False

#

## Top-level URL for deployment. Numerous other URLs depend on this.

#APP_INSTALL_URL = "https://host:port"

#

## The API implementation needs to accept and return absolute references

## to its resources. Thus, it needs to know its public URL.

#API_ROOT_URL = APP_INSTALL_URL + '/api'

#

## The API will return HTTP Bad Request if the ?changes-since

## parameter refers to a point in time more than POLL_LIMIT seconds ago.

#POLL_LIMIT = 3600

#

##

## Network Configuration

##

#

## Maximum allowed network size for private networks.

#MAX_CIDR_BLOCK = 22

#

## Default settings used by network flavors

#DEFAULT_MAC_PREFIX = 'aa:00:0'

#DEFAULT_BRIDGE = 'br0'

#

## Boolean value indicating whether synnefo would hold a Pool and allocate IP

## addresses. If this setting is set to False, IP pool management will be

## delegated to Ganeti. If machines have been created with this option as False,

## you must run network reconciliation after turning it to True.

#PUBLIC_USE_POOL = True

#

## Network flavors that users are allowed to create through API requests

#API_ENABLED_NETWORK_FLAVORS = ['MAC_FILTERED']

#

## Settings for IP_LESS_ROUTED network:

## -----------------------------------

## In this case VMCs act as routers that forward the traffic to/from VMs, based

## on the defined routing table($DEFAULT_ROUTING_TABLE) and ip rules, that

## exist in every node, implenting an IP-less routed and proxy-arp setup.

#DEFAULT_ROUTING_TABLE = 'snf_public'

#

## Settings for MAC_FILTERED network:

## ------------------------------------------

## All networks of this type are bridged to the same bridge. Isolation between

## networks is achieved by assigning a unique MAC-prefix to each network and

## filtering packets via ebtables.

#DEFAULT_MAC_FILTERED_BRIDGE = 'prv0'

#

#

## Firewalling

#GANETI_FIREWALL_ENABLED_TAG = 'synnefo:network:0:protected'

#GANETI_FIREWALL_DISABLED_TAG = 'synnefo:network:0:unprotected'

#GANETI_FIREWALL_PROTECTED_TAG = 'synnefo:network:0:limited'

#

## The default firewall profile that will be in effect if no tags are defined

#DEFAULT_FIREWALL_PROFILE = 'DISABLED'

#

## our REST API would prefer to be explicit about trailing slashes

#APPEND_SLASH = False

#

## Fixed mapping of user VMs to a specific backend.

## e.g. BACKEND_PER_USER = {'example@okeanos.grnet.gr': 2}

#BACKEND_PER_USER = {}

#

## List of backend IDs used *only* for archipelago.

#ARCHIPELAGO_BACKENDS = []

#

## Quota

## Maximum number of VMs a user is allowed to have.

#MAX_VMS_PER_USER = 3

#

## Override maximum number of VMs for specific users.

## e.g. VMS_USER_QUOTA = {'user1@grnet.gr': 5, 'user2@grnet.gr': 10}

#VMS_USER_QUOTA = {}

#

## Maximum number of networks a user is allowed to have.

#MAX_NETWORKS_PER_USER = 5

#

## Override maximum number of private networks for specific users.

## e.g. NETWORKS_USER_QUOTA = {'user1@grnet.gr': 5, 'user2@grnet.gr': 10}

#NETWORKS_USER_QUOTA = {}

#

## URL templates for the stat graphs.

## The API implementation replaces '%s' with the encrypted backend id.

## FIXME: For now we do not encrypt the backend id.

#CPU_BAR_GRAPH_URL = 'http://stats.okeanos.grnet.gr/%s/cpu-bar.png'

#CPU_TIMESERIES_GRAPH_URL = 'http://stats.okeanos.grnet.gr/%s/cpu-ts.png'

#NET_BAR_GRAPH_URL = 'http://stats.okeanos.grnet.gr/%s/net-bar.png'

#NET_TIMESERIES_GRAPH_URL = 'http://stats.okeanos.grnet.gr/%s/net-ts.png'

#

## Recommended refresh period for server stats

#STATS_REFRESH_PERIOD = 60

#

## The maximum number of file path/content pairs that can be supplied on server

## build

#MAX_PERSONALITY = 5

#

## The maximum size, in bytes, for each personality file

#MAX_PERSONALITY_SIZE = 10240

#

## Available storage types to be used as disk templates

## Use ext_<provider_name> to map specific provider for `ext` disk template.

#GANETI_DISK_TEMPLATES = ('blockdev', 'diskless', 'drbd', 'file', 'plain',

#                         'rbd',  'sharedfile')

#DEFAULT_GANETI_DISK_TEMPLATE = 'drbd'

#

## The URL of an astakos instance that will be used for user authentication

#ASTAKOS_URL = 'https://astakos.okeanos.grnet.gr/im/authenticate'

#

## Key for password encryption-decryption. After changing this setting, synnefo

## will be unable to decrypt all existing Backend passwords. You will need to

## store again the new password by using 'snf-manage backend-modify'.

## SECRET_ENCRYPTION_KEY may up to 32 bytes. Keys bigger than 32 bytes are not

## supported.

#SECRET_ENCRYPTION_KEY= "Password Encryption Key"

#

## Astakos service token

## The token used for astakos service api calls (e.g. api to retrieve user email

## using a user uuid)

#CYCLADES_ASTAKOS_SERVICE_TOKEN = ''

#

#Enable the helpdesk application

#HELPDESK_ENABLED = True

# Which is the cookie name that stores the token, leave it commented out

# to use same value as UI_AUTH_COOKIE_NAME value.

#HELPDESK_AUTH_COOKIE_NAME = UI_AUTH_COOKIE_NAME

# Astakos groups which have access to helpdesk views

#HELPDESK_PERMITTED_GROUPS = ['helpdesk']

# # -*- coding: utf-8 -*-

# #

# # QUOTAHOLDER configuration

# #####################

#

# # URL of the Quotaholder

# #

# #

# # Set to True to use the Quotaholder service. Otherwise, static

# # limits are used

# CYCLADES_USE_QUOTAHOLDER = False

#

# CYCLADES_QUOTAHOLDER_URL = "https://accountse.okeanos.grnet.gr/quotaholder/v"

#

# CYCLADES_QUOTAHOLDER_TOKEN = ""

## How often to check for user usage changes

#UI_QUOTAS_UPDATE_INTERVAL = 10000

#

#UI_NETWORK_AVAILABLE_NETWORK_TYPES = {'MAC_FILTERED': 'mac-filtering'}

## -*- coding: utf-8 -*-

#VMAPI_CACHE_BACKEND = "locmem://"

#VMAPI_CACHE_KEY_PREFIX = "vmapi"

#VMAPI_RESET_PARAMS = True

#VMAPI_BASE_URL = "https://cyclades.okeanos.grnet.gr/"