diff --git a/playbooks/home_db.yml b/playbooks/home_db.yml new file mode 100755 index 0000000..2e75cf5 --- /dev/null +++ b/playbooks/home_db.yml @@ -0,0 +1,29 @@ +#!/usr/bin/env ansible-playbook +# vim:ft=ansible: +--- +# Home media storage Pi +- hosts: vm-psql-1.home.mgmt.desu.ltd + roles: + - role: backup + vars: + backup_time: "Mon *-*-* 02:00:00" + tags: [ backup ] + - role: geerlingguy.postgresql + vars: + postgresql_global_config_options: + - option: listen_addresses + value: 192.168.103.1,172.23.103.1,127.0.0.1 + postgresql_hba_entries: + - { type: local, database: all, user: postgres, auth_method: peer } + - { type: local, database: all, user: all, auth_method: md5 } + - { type: host, database: all, user: all, address: '127.0.0.0/8', auth_method: md5 } + - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 } + # Used for internal access from other nodes + - { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 } + # Allow hosts over zerotier + - { type: host, database: all, user: all, address: '172.23.0.0/16', auth_method: md5 } + postgresql_users: + - name: nagios + password: "{{ secret_postgresql_monitoring_password }}" + postgresql_databases: [] + tags: [ home, db, psql ] diff --git a/site.yml b/site.yml index 4360cfd..1132f1c 100755 --- a/site.yml +++ b/site.yml @@ -17,6 +17,7 @@ - import_playbook: playbooks/device_roles_game.yml - import_playbook: playbooks/device_roles_workstation.yml # Home configuration +- import_playbook: playbooks/home_db.yml - import_playbook: playbooks/home_media.yml - import_playbook: playbooks/home_automation.yml # Production configuration