turn off gc, add memory override

files/etc/systemd/system/httpd.service.d/httpd-override.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryDenyWriteExecute=no

tasks/main.yml

@@ -53,6 +53,16 @@
   notify:
     - restart_httpd
 
+- name: Create httpd memory override
+  ansible.builtin.copy:
+    src: "etc/systemd/system/httpd.service.d/httpd-override.conf"
+    dest: "/etc/systemd/system/httpd.service.d/httpd-override.conf"
+    owner: root
+    group: root
+    mode: '0644'
+  notify:
+    - restart_httpd
+
 - name: Configure robots.txt
   ansible.builtin.copy:
     src: "var/www/html/robots.txt"
@@ -63,14 +73,8 @@
   notify:
     - restart_httpd
 
-- name: Deploy custom theme for koji
+# - name: Configure garbage collector
-  ansible.builtin.unarchive:
+#   import_tasks: koji-gc.yml
-    src: "{{ koji_theme_file }}"
-    dest: /
-  when: koji_theme
-
-- name: Configure garbage collector
-  import_tasks: koji-gc.yml
 
 - name: User Sync from FAS
   import_tasks: user-sync.yml

templates/etc/kojira/kojira.conf.j2

@@ -3,6 +3,11 @@ server={{ koji_hub_url }}
 topdir={{ koji_mount }}
 logfile=/var/log/kojira.log
 ;with_src=no
+serverca = {{ koji_hub_ca }}
+;authtype = kerberos
 principal = {{ koji_kojira_principal }}
 keytab = {{ koji_kojira_keytab }}
-serverca = {{ koji_hub_ca }}
+ignore_tags = module-*-build
+debug = false
+check_external_repos = true
+dist_repo_lifetime = 7257600