blob: 96b173c001e57eab1f2bec42de704662848db4e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
- name: install postgresql
dnf:
name: '{{ postgresql_packages }}'
state: present
- name: initialize database
command:
cmd: postgresql-setup --initdb
creates: '{{ postgresql_data_dir }}/PG_VERSION'
- import_tasks: freeipa.yml
tags: freeipa
- name: request TLS certificate
include_role:
name: getcert_request
vars:
certificate_service: postgres
certificate_path: '{{ postgresql_certificate_path }}'
certificate_key_path: '{{ postgresql_certificate_key_path }}'
certificate_owner: postgres
certificate_hook: systemctl reload postgresql
- name: generate dhparams
openssl_dhparam:
path: '{{ postgresql_dhparams_path }}'
size: 2048
- name: generate postgresql configuration
template:
src: '{{ postgresql_data_dir[1:] }}/{{ item }}.j2'
dest: '{{ postgresql_data_dir }}/{{ item }}'
owner: postgres
group: postgres
mode: 0600
loop:
- postgresql.conf
- pg_hba.conf
notify: restart postgresql
- name: enable postgresql service
systemd:
name: postgresql
enabled: yes
state: started
- name: open firewall ports
firewalld:
service: postgresql
permanent: yes
immediate: yes
state: enabled
tags: firewalld
|
