#!/usr/bin/env ansible-playbook # vim:ft=ansible: # Database servers --- - hosts: vm-general-1.ashburn.mgmt.desu.ltd roles: - role: geerlingguy.postgresql vars: postgresql_global_config_options: - option: listen_addresses value: 10.0.0.2,127.0.0.1 - option: max_connections value: 240 - option: shared_buffers value: 128MB postgresql_hba_entries: - { type: local, database: all, user: postgres, auth_method: trust } - { type: local, database: all, user: all, auth_method: md5 } - { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 } - { type: host, database: all, user: all, address: '::1/128', auth_method: md5 } # Used for internal access from other nodes - { type: host, database: all, user: all, address: '10.0.0.0/8', auth_method: md5 } # Used for internal access from Docker - { type: host, database: all, user: all, address: '172.16.0.0/12', auth_method: md5 } postgresql_users: - name: ara-desultd password: "{{ secret_ara_db_pass }}" - name: gitea-desultd password: "{{ secret_gitea_db_pass }}" - name: gitlab-desultd password: "{{ secret_gitlab_db_pass }}" - name: gulagbot-test password: "{{ secret_gulagbot_test_db_pass }}" - name: nagios password: "{{ secret_postgresql_monitoring_password }}" - name: netbox-desultd password: "{{ secret_netbox_db_pass }}" - name: nextcloud-desultd password: "{{ secret_nextcloud_db_pass }}" - name: peertube-cowfee password: "{{ secret_peertube_db_pass }}" - name: pleroma-cowfee password: "{{ secret_pleroma_9iron_db_pass }}" - name: synapse-desultd password: "{{ secret_synapse_db_pass }}" - name: vaultwarden-desultd password: "{{ secret_vaultwarden_db_pass }}" postgresql_databases: - name: ara-desultd owner: ara-desultd - name: gitea-desultd owner: gitea-desultd - name: gitlab-desultd owner: gitlab-desultd - name: gulagbot-test owner: gulagbot-test - name: netbox-desultd owner: netbox-desultd - name: nextcloud-desultd owner: nextcloud-desultd - name: pleroma_cowfee owner: pleroma-cowfee - name: peertube owner: peertube-cowfee - name: synapse-desultd lc_collate: C lc_ctype: C owner: synapse-desultd - name: vaultwarden-desultd owner: vaultwarden-desultd tags: [ db, psql ]