<commit_before>---
- hosts: [ 'mon-staging', 'app-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - staging-specific.yml

  roles:
    - { role: common, tags: [ 'common' ] }

  sudo: yes

- hosts: [ 'mon-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/mon.yml
    - staging-specific.yml

  roles:
    - { role: common-mon, tags: [ 'common' ] }
    # this is a staging only role
    - { role: install_local_pkgs, tags: [ 'install_local_pkgs' ] }
    - ossec_server

  sudo: yes

- hosts: [ 'app-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/app.yml
    - staging-specific.yml

  roles:
    - { role: common-app, tags: [ 'common' ] }
    # this is a staging only role
    - { role: install_local_pkgs, tags: [ 'install_local_pkgs' ] }
    - { role: ossec_agent, tags: [ 'ossec' ] }
    - app
    - app-test

  sudo: yes

  # If the OSSEC authd iptable rule exemptions are in place remove them and
  # restart OSSEC. For the ossec agent the exemptions are removes as part of
  # the authd role. In order to allow all agents to connect to the ossec server
  # before kill authd and removing the ossec rules. This is a separate role for
  # the ossec server. The order of events does matter the monitor server authd
  # service needs to be listening and reachable, then agent needs to connect to
  # ossec server, agent needs to restart, then ossec server exemptions can be
  # removed and the ossec server process can restart.
- hosts: [ 'mon-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/mon.yml
    - staging-specific.yml
<commit_msg>added a app-test role to skip when updating app-armor profiles<commit_after>---
- hosts: [ 'mon-staging', 'app-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - staging-specific.yml

  roles:
    - { role: common, tags: [ 'common' ] }

  sudo: yes

- hosts: [ 'mon-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/mon.yml
    - staging-specific.yml

  roles:
    - { role: common-mon, tags: [ 'common' ] }
    # this is a staging only role
    - { role: install_local_pkgs, tags: [ 'install_local_pkgs' ] }
    - ossec_server

  sudo: yes

- hosts: [ 'app-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/app.yml
    - staging-specific.yml

  roles:
    - { role: common-app, tags: [ 'common' ] }
    # this is a staging only role
    - { role: install_local_pkgs, tags: [ 'install_local_pkgs' ] }
    - { role: ossec_agent, tags: [ 'ossec' ] }
    - app
    - { role: app-test, tags: [ 'app-test' ] }

  sudo: yes

  # If the OSSEC authd iptable rule exemptions are in place remove them and
  # restart OSSEC. For the ossec agent the exemptions are removes as part of
  # the authd role. In order to allow all agents to connect to the ossec server
  # before kill authd and removing the ossec rules. This is a separate role for
  # the ossec server. The order of events does matter the monitor server authd
  # service needs to be listening and reachable, then agent needs to connect to
  # ossec server, agent needs to restart, then ossec server exemptions can be
  # removed and the ossec server process can restart.
- hosts: [ 'mon-staging' ]

  vars_files:
    - group_vars/securedrop.yml
    - host_vars/mon.yml
    - staging-specific.yml

{'fraction_non_alphanumeric': 0.10248726400958945, 'fraction_numerical': 0.0, 'mean_word_length': 2.717149220489978, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7551532', 'n_tokens_mistral': 1169, 'n_tokens_neox': 1096, 'n_words': 360}