ansible/playbooks/db.yml

#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
# Database servers
---
- hosts: psql1.desu.ltd
  roles:
    - role: backup
      tags: [ backup ]
    - role: motd
      vars:
        motd_watch_services_extra:
          - postgresql
      tags: [ motd ]
    - role: postgresql
      vars:
        postgresql_global_config_options:
          - option: listen_addresses
            value: 192.168.164.156
        postgresql_hba_entries:
          - { type: local, database: all, user: postgres, auth_method: peer }
          - { type: local, database: all, user: all, auth_method: md5 }
          - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 }
          - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
            # Used for internal access from other nodes
          - { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 }
        postgresql_users:
          - name: gitea-desultd
            password: "{{ secret_gitea_db_pass }}"
          - name: gulagbot-desultd
            password: "{{ secret_gulagbot_db_pass }}"
          - name: nextcloud-desultd
            password: "{{ secret_nextcloud_db_pass }}"
          - name: peertube-cowfee
            password: "{{ secret_peertube_db_pass }}"
          - name: pleroma-cowfee
            password: "{{ secret_pleroma_9iron_db_pass }}"
        postgresql_databases:
          - name: gitea-desultd
            owner: gitea-desultd
          - name: gulagbot-desultd
            owner: gulagbot-desultd
          - name: nextcloud-desultd
            owner: nextcloud-desultd
          - name: pleroma_cowfee
            owner: pleroma-cowfee
          - name: peertube
            owner: peertube-cowfee
      tags: [ db, psql ]
  tasks:
    - name: enable db extensions for peertube
      postgresql_ext: name={{ item }} db=peertube
      with_items:
        - pg_trgm
        - unaccent
      tags: [ db, psql, ext ]
- hosts: psql1.9iron.club
  roles:
    - role: backup
      tags: [ backup ]
    - role: motd
      vars:
        motd_watch_services_extra:
          - postgresql
      tags: [ motd ]
    - role: postgresql
      vars:
        postgresql_hba_entries:
          - { type: local, database: all, user: postgres, auth_method: peer }
          - { type: local, database: all, user: all, auth_method: md5 }
          - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 }
          - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
          - { type: host, database: all, user: all, address: '172.31.0.0/16', auth_method: md5 }
        postgresql_users:
          - name: gitea
            password: "{{ secret_gitea_9iron_db_pass }}"
          - name: nextcloud
            password: "{{ secret_nextcloud_9iron_db_pass }}"
          - name: onlyoffice-9iron
            password: "{{ secret_onlyoffice_9iron_db_pass }}"
          - name: pleroma
            password: "{{ secret_pleroma_9iron_db_pass }}"
          - name: matrix
            password: "{{ secret_matrix_9iron_db_pass }}"
        postgresql_databases:
          - name: gitea
            lc_collate: C.UTF-8
            lc_ctype: C.UTF-8
            owner: gitea
          - name: nextcloud
            lc_collate: C.UTF-8
            lc_ctype: C.UTF-8
            owner: nextcloud
          - name: onlyoffice-9iron
            lc_collate: C.UTF-8
            lc_ctype: C.UTF-8
            owner: onlyoffice-9iron
          - name: pleroma
            lc_collate: C.UTF-8
            lc_ctype: C.UTF-8
            owner: pleroma
          - name: matrix
            lc_collate: C
            lc_ctype: C
            owner: matrix
      tags: [ db, psql ]