#!/usr/bin/env ansible-playbook # vim:ft=ansible: # Database servers --- - hosts: psql1.desu.ltd roles: - role: backup tags: [ backup ] - role: postgresql vars: postgresql_global_config_options: - option: listen_addresses value: 192.168.164.156,127.0.0.1 - option: max_connections value: 60 - option: shared_buffers value: 128MB postgresql_hba_entries: - { type: local, database: all, user: postgres, auth_method: trust } - { type: local, database: all, user: all, auth_method: md5 } - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 } - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 } # Used for internal access from other nodes - { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 } postgresql_users: - name: gitea-desultd password: "{{ secret_gitea_db_pass }}" - name: gulagbot-desultd password: "{{ secret_gulagbot_db_pass }}" - name: nagios password: "{{ secret_postgresql_monitoring_password }}" - name: netbox-desultd password: "{{ secret_netbox_db_pass }}" - name: nextcloud-desultd password: "{{ secret_nextcloud_db_pass }}" - name: peertube-cowfee password: "{{ secret_peertube_db_pass }}" - name: pleroma-cowfee password: "{{ secret_pleroma_9iron_db_pass }}" postgresql_databases: - name: gitea-desultd owner: gitea-desultd - name: gulagbot-desultd owner: gulagbot-desultd - name: netbox-desultd owner: netbox-desultd - name: nextcloud-desultd owner: nextcloud-desultd - name: pleroma_cowfee owner: pleroma-cowfee - name: peertube owner: peertube-cowfee tags: [ db, psql ]