diff --git a/inventory/group_vars/all.yml b/inventory/group_vars/all.yml index 4e9a008..a92fad8 100644 --- a/inventory/group_vars/all.yml +++ b/inventory/group_vars/all.yml @@ -48,6 +48,14 @@ apache_ssl_protocol: all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ##RESERVED # For gitea +secret_gitea_9iron_db_pass: !vault | + $ANSIBLE_VAULT;1.1;AES256 + 62353264353465316661353738666161313036373761666163663733656461316536636334386335 + 6161386630663739363439383237343065333239613134610a383036373735326536386464343164 + 31346337636665356630336234306534646362386663633734353166373761316139313734306630 + 3364306566323666310a323034303434613237643665643637633430353437316339356463646331 + 33353062343164396465326365653561626363343961326363633231303736316436643935646161 + 3933353234613430373930663832643934613233383635613433 secret_gitea_db_pass: !vault | $ANSIBLE_VAULT;1.1;AES256 35343032343364306363646232613831386530313430663664396432353431393039626230626137 @@ -79,6 +87,13 @@ gitea_internal_token: !vault | 623964653936646334313864643030653763 # For Nextcloud +secret_nextcloud_9iron_db_pass: !vault | + $ANSIBLE_VAULT;1.1;AES256 + 37633035633563646266346264333636393931323664313166633133653461646333643731636661 + 3966666665396239346662613764353333393038663762340a313236396331623061376462356437 + 66373234633939393034353439393465663131303661393164303335336435653734613064663964 + 3332313764623133630a393731613236373837316437653265636663666261383135636662373566 + 61373135303632336237333836353764646639633735323566346366623766646266 secret_nextcloud_db_pass: !vault | $ANSIBLE_VAULT;1.1;AES256 31626162623164373133356634323436373634616363663966313039313431643837326630346632 diff --git a/playbooks/db.yml b/playbooks/db.yml index d546a1d..b0800f8 100755 --- a/playbooks/db.yml +++ b/playbooks/db.yml @@ -48,5 +48,19 @@ - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 } - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 } - { type: host, database: all, user: all, address: '172.31.0.0/16', auth_method: md5 } + postgresql_users: + - name: gitea + password: "{{ secret_gitea_9iron_db_pass }}" + - name: nextcloud + password: "{{ secret_nextcloud_9iron_db_pass }}" + postgresql_databases: + - name: gitea + lc_collate: C.UTF-8 + lc_ctype: C.UTF-8 + owner: gitea + - name: nextcloud + lc_collate: C.UTF-8 + lc_ctype: C.UTF-8 + owner: nextcloud become: yes tags: [ db, psql ]