{
  "name": "prod_jump_box",
  "description": "Role applied to AWS developer jump boxes",
  "run_list": [
    "role[prod_base_linux]",
    "recipe[irrigate-orchard_base::dev_user_ssh]",
    "recipe[irrigate-orchard_base::unattended_upgrade]",
    "recipe[irrigate-docker::install]",
    "recipe[irrigate-datadog::docker]"
  ],
  "default_attributes": {
    "datadog": {
      "tags": {
        "service_name": "jump_box"
      }
    },
    "docker": {
      "users": ["devorch"]
    },
    "firewall": {
      "firewalld": {
        "permanent": true
      }
    },
    "os-hardening": {
      "network": {
        "forwarding": "true"
      }
    },
    "unattended_upgrades": {
      "automatic_reboot": true,
      "unattended_upgrade": 7
    },
    "splunk": {
      "packagecloud_token_data_bag_name": "prod_splunk_packagecloud_token",
      "vpc_endpoint_dns": "vpce-0d2157ca4383aa4ce-0ijs4w7o.vpce-svc-0172c4b1d11bfe606.us-east-1.vpce.amazonaws.com",
      "function": "server"
    }
  }
}