<commit_before><?xml version="1.0" ?>
<projects>
  <project name="webfront">
    <title>configuration of the front-end web servers</title>
    <description>
Maintenance scripts for the front-end session manager proxy.
    </description>
    <maintainer>
      <personname><NAME></personname>
      <email><EMAIL></email>
    </maintainer>
    <package name="CentOS">
      <variable name="domainName">
        <description>Domain name for the web server being configured.</description>
      </variable>
      <variable name="ldapHost">
        <description>
Name of the machine hosting the LDAP server.
        </description>
        <default>dbs.ec2.internal</default>
      </variable>
      <variable name="notifyEmail">
        <description>Email to send notification to about the state of the machine.</description>
      </variable>
      <variable name="emailHost">
        <description>Host for the email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailPort">
        <description>Port on the host email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailHostUser">
        <description>User to connect to the email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailHostPassword">
        <description>Password to connect to the email server used to send notification about the state of the machine.</description>
      </variable>
      <!-- Access control -->
      <dep name="iptables">
        <bin>iptables</bin>
        <port>22</port>
        <port>80</port>
        <port>443</port>
      </dep>
      <dep name="authconfig">
        <bin>authconfig</bin>
      </dep>
      <dep name="sssd">
        <bin>sssd</bin>
      </dep>
      <dep name="openssh-ldap">
        <libexec>.*/(openssh)/ssh-ldap-helper</libexec>
      </dep>
      <dep name="openssh-server">
        <bin>sshd</bin>
        <extra name="/etc/ssh/sshd_config">
          <PermitRootLogin>no</PermitRootLogin>
          <AuthorizedKeysFile>%%h/.ssh/authorized_keys</AuthorizedKeysFile>
          <AuthorizedKeysCommand>/usr/libexec/openssh/ssh-ldap-wrapper</AuthorizedKeysCommand>
          <AuthorizedKeysCommandUser>nobody</AuthorizedKeysCommandUser>
          <!-- BE CAREFUL: Password authentication is enabled here only
               when we use a sally port to access the web machines. -->
          <PasswordAuthentication>no</PasswordAuthentication>
          <UsePrivilegeSeparation>yes</UsePrivilegeSeparation>
          <PermitTunnel>no</PermitTunnel>
          <X11Forwarding>no</X11Forwarding>
          <StrictModes>yes</StrictModes>
          <IgnoreRhosts>yes</IgnoreRhosts>
          <HostbasedAuthentication>no</HostbasedAuthentication>
          <RhostsRSAAuthentication>no</RhostsRSAAuthentication>
          <PubkeyAuthentication>yes</PubkeyAuthentication>
        </extra>
      </dep>
      <dep name="openldap-clients">
        <bin>ldapsearch</bin>
      </dep>
      <!-- monitoring -->
      <dep name="syslog-ng">
        <bin>syslog-ng</bin>
      </dep>
      <dep name="syslog-ng-libdbi">
        <lib>dbi</lib>
      </dep>
      <dep name="fail2ban">
        <bin>fail2ban-client</bin>
      </dep>
      <dep name="monit">
        <bin>monit</bin>
      </dep>
      <dep name="ssmtp">
        <bin>ssmtp</bin>
      </dep>
      <!-- reverse proxy -->
      <dep name="nginx">
        <bin>nginx</bin>
        <extra name="conf.d/%(domainName)s.conf">
          <domainName>%(domainName)s</domainName>
          <port>443</port>
          <webapp>
            <path>/</path>
            <port>8000</port>
          </webapp>
        </extra>
      </dep>
      <dep name="certbot-nginx">
        <!-- https://certbot.eff.org/#fedora24-nginx -->
        <bin>certbot</bin>
      </dep>
      <dep name="docker">
        <bin>docker</bin>
      </dep>
      <!-- fonts used to generate PDFs -->
      <dep name="dejavu-sans-fonts">
        <share>fonts/extras/dejavu-sans-fonts.ttf</share>
      </dep>
      <dep name="dejavu-serif-fonts">
        <share>fonts/extras/dejavu-serif-fonts.ttf</share>
      </dep>
      <dep name="dejavu-lgc-sans-fonts">
        <share>fonts/extras/dejavu-lgc-sans-fonts.ttf</share>
      </dep>
      <dep name="dejavu-lgc-serif-fonts">
        <share>fonts/extras/dejavu-lgc-serif-fonts.ttf</share>
      </dep>
      <dep name="dejavu-sans-mono-fonts">
        <share>fonts/extras/dejavu-sans-mono-fonts.ttf</share>
      </dep>
      <dep name="dejavu-lgc-sans-mono-fonts">
        <share>fonts/extras/dejavu-lgc-sans-mono-fonts.ttf</share>
      </dep>
      <!-- because we use this profile for jenkins workers -->
      <dep name="java-1.8.0-openjdk-headless">
        <bin>java</bin>
      </dep>
      <dep name="jq">
        <!-- command-line JSON parser that is useful
             to process aws cli output. -->
        <bin>jq</bin>
      </dep>
      <dep name="wget">
        <bin>wget</bin>
      </dep>
    </package>
    <package name="Fedora">
      <variable name="domainName">
        <description>Domain name for the web server being configured.</description>
      </variable>
      <variable name="ldapHost">
        <description>
Name of the machine hosting the LDAP server.
        </description>
        <default>dbs.ec2.internal</default>
      </variable>
      <variable name="notifyEmail">
        <description>Email to send notification to about the state of the machine.</description>
      </variable><commit_msg>CentOS has its own naming convention for fonts, different from Fedora<commit_after><?xml version="1.0" ?>
<projects>
  <project name="webfront">
    <title>configuration of the front-end web servers</title>
    <description>
Maintenance scripts for the front-end session manager proxy.
    </description>
    <maintainer>
      <personname><NAME></personname>
      <email><EMAIL></email>
    </maintainer>
    <package name="CentOS">
      <variable name="domainName">
        <description>Domain name for the web server being configured.</description>
      </variable>
      <variable name="ldapHost">
        <description>
Name of the machine hosting the LDAP server.
        </description>
        <default>dbs.ec2.internal</default>
      </variable>
      <variable name="notifyEmail">
        <description>Email to send notification to about the state of the machine.</description>
      </variable>
      <variable name="emailHost">
        <description>Host for the email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailPort">
        <description>Port on the host email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailHostUser">
        <description>User to connect to the email server used to send notification about the state of the machine.</description>
      </variable>
      <variable name="emailHostPassword">
        <description>Password to connect to the email server used to send notification about the state of the machine.</description>
      </variable>
      <!-- Access control -->
      <dep name="iptables">
        <bin>iptables</bin>
        <port>22</port>
        <port>80</port>
        <port>443</port>
      </dep>
      <dep name="authconfig">
        <bin>authconfig</bin>
      </dep>
      <dep name="sssd">
        <bin>sssd</bin>
      </dep>
      <dep name="openssh-ldap">
        <libexec>.*/(openssh)/ssh-ldap-helper</libexec>
      </dep>
      <dep name="openssh-server">
        <bin>sshd</bin>
        <extra name="/etc/ssh/sshd_config">
          <PermitRootLogin>no</PermitRootLogin>
          <AuthorizedKeysFile>%%h/.ssh/authorized_keys</AuthorizedKeysFile>
          <AuthorizedKeysCommand>/usr/libexec/openssh/ssh-ldap-wrapper</AuthorizedKeysCommand>
          <AuthorizedKeysCommandUser>nobody</AuthorizedKeysCommandUser>
          <!-- BE CAREFUL: Password authentication is enabled here only
               when we use a sally port to access the web machines. -->
          <PasswordAuthentication>no</PasswordAuthentication>
          <UsePrivilegeSeparation>yes</UsePrivilegeSeparation>
          <PermitTunnel>no</PermitTunnel>
          <X11Forwarding>no</X11Forwarding>
          <StrictModes>yes</StrictModes>
          <IgnoreRhosts>yes</IgnoreRhosts>
          <HostbasedAuthentication>no</HostbasedAuthentication>
          <RhostsRSAAuthentication>no</RhostsRSAAuthentication>
          <PubkeyAuthentication>yes</PubkeyAuthentication>
        </extra>
      </dep>
      <dep name="openldap-clients">
        <bin>ldapsearch</bin>
      </dep>
      <!-- monitoring -->
      <dep name="syslog-ng">
        <bin>syslog-ng</bin>
      </dep>
      <dep name="syslog-ng-libdbi">
        <lib>dbi</lib>
      </dep>
      <dep name="fail2ban">
        <bin>fail2ban-client</bin>
      </dep>
      <dep name="monit">
        <bin>monit</bin>
      </dep>
      <dep name="ssmtp">
        <bin>ssmtp</bin>
      </dep>
      <!-- reverse proxy -->
      <dep name="nginx">
        <bin>nginx</bin>
        <extra name="conf.d/%(domainName)s.conf">
          <domainName>%(domainName)s</domainName>
          <port>443</port>
          <webapp>
            <path>/</path>
            <port>8000</port>
          </webapp>
        </extra>
      </dep>
      <dep name="certbot-nginx">
        <!-- https://certbot.eff.org/#fedora24-nginx -->
        <bin>certbot</bin>
      </dep>
      <dep name="docker">
        <bin>docker</bin>
      </dep>
      <!-- fonts used to generate PDFs -->
      <dep name="dejavu-sans-fonts">
        <share>fonts/dejavu/DejaVuSans.ttf</share>
      </dep>
      <dep name="dejavu-serif-fonts">
        <share>fonts/dejavu/DejaVuSerif.ttf</share>
      </dep>
      <dep name="dejavu-lgc-sans-fonts">
        <share>fonts/dejavu/DejaVuLGCSans.ttf</share>
      </dep>
      <dep name="dejavu-lgc-serif-fonts">
        <share>fonts/dejavu/DejaVuLGCSerif.ttf</share>
      </dep>
      <dep name="dejavu-sans-mono-fonts">
        <share>fonts/dejavu/DejaVuSansMono.ttf</share>
      </dep>
      <dep name="dejavu-lgc-sans-mono-fonts">
        <share>fonts/dejavu/DejaVuLGCSansMono.ttf</share>
      </dep>
      <!-- because we use this profile for jenkins workers -->
      <dep name="java-1.8.0-openjdk-headless">
        <bin>java</bin>
      </dep>
      <dep name="jq">
        <!-- command-line JSON parser that is useful
             to process aws cli output. -->
        <bin>jq</bin>
      </dep>
      <dep name="wget">
        <bin>wget</bin>
      </dep>
    </package>
    <package name="Fedora">
      <variable name="domainName">
        <description>Domain name for the web server being configured.</description>
      </variable>
      <variable name="ldapHost">
        <description>
Name of the machine hosting the LDAP server.
        </description>
        <default>dbs.ec2.internal</default>
      </variable>
      <variable name="notifyEmail">
        <description>Email to send notification to about the state of the machine.</description>
      </variable>
{'fraction_non_alphanumeric': 0.14122035704769517, 'fraction_numerical': 0.005151434408029132, 'mean_word_length': 2.347205707491082, 'pattern_counts': {'":': 0, '<': 419, '<?xml version=': 2, '>': 419, 'https://': 2, 'lorem ipsum': 0, 'www.': 0, 'xml': 2}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1047706', 'n_tokens_mistral': 3510, 'n_tokens_neox': 3411, 'n_words': 717}