#!/usr/bin/env ansible-playbook # vim:ft=ansible: # Database servers --- - hosts: psql1.desu.ltd roles: - role: backup tags: [ backup ] - role: motd vars: motd_watch_services_extra: - postgresql tags: [ motd ] - role: postgresql vars: postgresql_global_config_options: - option: listen_addresses value: 192.168.164.156 postgresql_hba_entries: - { type: local, database: all, user: postgres, auth_method: trust } - { type: local, database: all, user: all, auth_method: md5 } - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 } - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 } # Used for internal access from other nodes - { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 } postgresql_users: - name: gitea-desultd password: "{{ secret_gitea_db_pass }}" - name: gulagbot-desultd password: "{{ secret_gulagbot_db_pass }}" - name: netbox-desultd password: "{{ secret_netbox_db_pass }}" - name: nextcloud-desultd password: "{{ secret_nextcloud_db_pass }}" - name: peertube-cowfee password: "{{ secret_peertube_db_pass }}" - name: pleroma-cowfee password: "{{ secret_pleroma_9iron_db_pass }}" postgresql_databases: - name: gitea-desultd owner: gitea-desultd - name: gulagbot-desultd owner: gulagbot-desultd - name: netbox-desultd owner: netbox-desultd - name: nextcloud-desultd owner: nextcloud-desultd - name: pleroma_cowfee owner: pleroma-cowfee - name: peertube owner: peertube-cowfee tags: [ db, psql ]