ansible/playbooks/prod_db.yml

74 lines
2.8 KiB
YAML
Raw Normal View History

#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
# Database servers
---
- hosts: vm-general-1.ashburn.mgmt.desu.ltd
roles:
- role: geerlingguy.postgresql
vars:
postgresql_global_config_options:
- option: listen_addresses
value: 10.0.0.2,127.0.0.1
- option: max_connections
value: 240
- option: shared_buffers
value: 128MB
2024-01-12 00:49:18 -06:00
- option: log_directory
value: 'log'
postgresql_hba_entries:
- { type: local, database: all, user: postgres, auth_method: trust }
2021-01-26 04:25:27 -06:00
- { type: local, database: all, user: all, auth_method: md5 }
- { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 }
- { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
# Used for internal access from other nodes
- { type: host, database: all, user: all, address: '10.0.0.0/8', auth_method: md5 }
# Used for internal access from Docker
- { type: host, database: all, user: all, address: '172.16.0.0/12', auth_method: md5 }
postgresql_users:
2022-04-23 10:54:26 -05:00
- name: ara-desultd
password: "{{ secret_ara_db_pass }}"
2022-09-03 17:27:17 -05:00
- name: firefly-desultd
password: "{{ secret_firefly_db_pass }}"
- name: gitea-desultd
password: "{{ secret_gitea_db_pass }}"
2022-08-04 18:31:08 -05:00
- name: gitlab-desultd
password: "{{ secret_gitlab_db_pass }}"
2021-08-23 18:18:53 -05:00
- name: nagios
password: "{{ secret_postgresql_monitoring_password }}"
- name: netbox-desultd
password: "{{ secret_netbox_db_pass }}"
- name: nextcloud-desultd
password: "{{ secret_nextcloud_db_pass }}"
2021-06-03 19:11:50 -05:00
- name: peertube-cowfee
password: "{{ secret_peertube_db_pass }}"
2021-01-26 04:25:27 -06:00
- name: pleroma-cowfee
password: "{{ secret_pleroma_9iron_db_pass }}"
2021-10-02 22:03:05 -05:00
- name: synapse-desultd
password: "{{ secret_synapse_db_pass }}"
2022-07-23 17:30:14 -05:00
- name: vaultwarden-desultd
password: "{{ secret_vaultwarden_db_pass }}"
postgresql_databases:
2022-04-23 10:54:26 -05:00
- name: ara-desultd
owner: ara-desultd
2022-09-03 17:27:17 -05:00
- name: firefly-desultd
owner: firefly-desultd
- name: gitea-desultd
owner: gitea-desultd
2022-08-04 18:31:08 -05:00
- name: gitlab-desultd
owner: gitlab-desultd
- name: netbox-desultd
owner: netbox-desultd
- name: nextcloud-desultd
owner: nextcloud-desultd
- name: pleroma_cowfee
2021-03-11 09:39:04 -06:00
owner: pleroma-cowfee
2021-06-07 02:52:11 -05:00
- name: peertube
2021-06-03 19:11:50 -05:00
owner: peertube-cowfee
2021-10-02 22:03:05 -05:00
- name: synapse-desultd
lc_collate: C
lc_ctype: C
owner: synapse-desultd
2022-07-23 17:30:14 -05:00
- name: vaultwarden-desultd
owner: vaultwarden-desultd
tags: [ db, psql ]