#!/usr/bin/env ansible-playbook
# vim:ft=ansible:
---
# Home media storage Pi
- hosts: vm-psql-1.home.mgmt.desu.ltd
  roles:
    - role: backup
      vars:
        backup_time: "Mon *-*-* 02:00:00"
      tags: [ backup ]
    - role: geerlingguy.postgresql
      vars:
        postgresql_global_config_options:
          - option: listen_addresses
            value: "*"
        postgresql_hba_entries:
          - { type: local, database: all, user: postgres, auth_method: peer }
          - { type: local, database: all, user: all, auth_method: md5 }
          - { type: host, database: all, user: all, address: '127.0.0.0/8', auth_method: md5 }
          - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
            # Used for internal access from other nodes
          - { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 }
            # Allow hosts over zerotier
          - { type: host, database: all, user: all, address: '172.23.0.0/16', auth_method: md5 }
        postgresql_users:
          - name: gulagbot-desultd
            password: "{{ secret_gulagbot_db_pass }}"
          - name: nagios
            password: "{{ secret_postgresql_monitoring_password }}"
        postgresql_databases:
          - name: gulagbot-desultd
            owner: gulagbot-desultd
      tags: [ home, db, psql ]