99 lines
3.5 KiB
YAML
Executable File
99 lines
3.5 KiB
YAML
Executable File
#!/usr/bin/env ansible-playbook
|
|
# vim:ft=ansible:
|
|
# Database servers
|
|
---
|
|
- hosts: psql1.desu.ltd
|
|
roles:
|
|
- role: backup
|
|
tags: [ backup ]
|
|
- role: motd
|
|
vars:
|
|
motd_watch_services_extra:
|
|
- postgresql
|
|
tags: [ motd ]
|
|
- role: postgresql
|
|
vars:
|
|
postgresql_global_config_options:
|
|
- option: listen_addresses
|
|
value: 192.168.164.156
|
|
postgresql_hba_entries:
|
|
- { type: local, database: all, user: postgres, auth_method: peer }
|
|
- { type: local, database: all, user: all, auth_method: md5 }
|
|
- { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 }
|
|
- { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
|
|
# Used for internal access from other nodes
|
|
- { type: host, database: all, user: all, address: '192.168.0.0/16', auth_method: md5 }
|
|
postgresql_users:
|
|
- name: gitea-desultd
|
|
password: "{{ secret_gitea_db_pass }}"
|
|
- name: gulagbot-desultd
|
|
password: "{{ secret_gulagbot_db_pass }}"
|
|
- name: nextcloud-desultd
|
|
password: "{{ secret_nextcloud_db_pass }}"
|
|
- name: peertube-cowfee
|
|
password: "{{ secret_peertube_db_pass }}"
|
|
- name: pleroma-cowfee
|
|
password: "{{ secret_pleroma_9iron_db_pass }}"
|
|
postgresql_databases:
|
|
- name: gitea-desultd
|
|
owner: gitea-desultd
|
|
- name: gulagbot-desultd
|
|
owner: gulagbot-desultd
|
|
- name: nextcloud-desultd
|
|
owner: nextcloud-desultd
|
|
- name: pleroma_cowfee
|
|
owner: pleroma-cowfee
|
|
- name: peertube
|
|
owner: peertube-cowfee
|
|
tags: [ db, psql ]
|
|
- hosts: psql1.9iron.club
|
|
roles:
|
|
- role: backup
|
|
tags: [ backup ]
|
|
- role: motd
|
|
vars:
|
|
motd_watch_services_extra:
|
|
- postgresql
|
|
tags: [ motd ]
|
|
- role: postgresql
|
|
vars:
|
|
postgresql_hba_entries:
|
|
- { type: local, database: all, user: postgres, auth_method: peer }
|
|
- { type: local, database: all, user: all, auth_method: md5 }
|
|
- { type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5 }
|
|
- { type: host, database: all, user: all, address: '::1/128', auth_method: md5 }
|
|
- { type: host, database: all, user: all, address: '172.31.0.0/16', auth_method: md5 }
|
|
postgresql_users:
|
|
- name: gitea
|
|
password: "{{ secret_gitea_9iron_db_pass }}"
|
|
- name: nextcloud
|
|
password: "{{ secret_nextcloud_9iron_db_pass }}"
|
|
- name: onlyoffice-9iron
|
|
password: "{{ secret_onlyoffice_9iron_db_pass }}"
|
|
- name: pleroma
|
|
password: "{{ secret_pleroma_9iron_db_pass }}"
|
|
- name: matrix
|
|
password: "{{ secret_matrix_9iron_db_pass }}"
|
|
postgresql_databases:
|
|
- name: gitea
|
|
lc_collate: C.UTF-8
|
|
lc_ctype: C.UTF-8
|
|
owner: gitea
|
|
- name: nextcloud
|
|
lc_collate: C.UTF-8
|
|
lc_ctype: C.UTF-8
|
|
owner: nextcloud
|
|
- name: onlyoffice-9iron
|
|
lc_collate: C.UTF-8
|
|
lc_ctype: C.UTF-8
|
|
owner: onlyoffice-9iron
|
|
- name: pleroma
|
|
lc_collate: C.UTF-8
|
|
lc_ctype: C.UTF-8
|
|
owner: pleroma
|
|
- name: matrix
|
|
lc_collate: C
|
|
lc_ctype: C
|
|
owner: matrix
|
|
tags: [ db, psql ]
|