mirror of
https://gitea.0xace.cc/ansible-galaxy/postgresql.git
synced 2025-06-29 02:13:06 +00:00
rewrite ssl cert generation
This commit is contained in:
@ -2,15 +2,15 @@
|
||||
- name: Create data directory
|
||||
file:
|
||||
path: "{{ postgresql_data_dir }}"
|
||||
owner: "postgres"
|
||||
group: "postgres"
|
||||
owner: "{{ postgresql_user }}"
|
||||
group: "{{ postgresql_group }}"
|
||||
state: directory
|
||||
|
||||
- name: Create configuration directory
|
||||
file:
|
||||
path: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}"
|
||||
owner: "postgres"
|
||||
group: "postgres"
|
||||
owner: "{{ postgresql_user }}"
|
||||
group: "{{ postgresql_group }}"
|
||||
state: directory
|
||||
|
||||
- name: Merge user options for PostgreSQL config
|
||||
@ -29,33 +29,33 @@
|
||||
block:
|
||||
- name: Template PostgreSQL pg_hba configuration
|
||||
template:
|
||||
src: "{{ postgresql_major_version }}-pg_hba.conf.j2"
|
||||
src: "pg_hba.conf.j2"
|
||||
dest: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}/pg_hba.conf"
|
||||
mode: 0600
|
||||
owner: postgres
|
||||
group: postgres
|
||||
owner: "{{ postgresql_user }}"
|
||||
group: "{{ postgresql_group }}"
|
||||
register: pg_hba_config_file
|
||||
notify:
|
||||
- Reload PostgreSQL
|
||||
- Restart PostgreSQL
|
||||
- name: Template PostgreSQL configuration
|
||||
template:
|
||||
src: "{{ postgresql_major_version }}-postgresql.conf.j2"
|
||||
src: "postgresql.conf.j2"
|
||||
dest: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}/postgresql.conf"
|
||||
mode: 0600
|
||||
owner: postgres
|
||||
group: postgres
|
||||
owner: "{{ postgresql_user }}"
|
||||
group: "{{ postgresql_group }}"
|
||||
register: postgresql_config_file
|
||||
notify:
|
||||
- Reload PostgreSQL
|
||||
- Restart PostgreSQL
|
||||
- name: Template PostgreSQL SSL configuration
|
||||
template:
|
||||
src: "{{ postgresql_major_version }}-postgresql.ssl.conf.j2"
|
||||
src: "postgresql.ssl.conf.j2"
|
||||
dest: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}/postgresql.ssl.conf"
|
||||
mode: 0600
|
||||
owner: postgres
|
||||
group: postgres
|
||||
owner: "{{ postgresql_user }}"
|
||||
group: "{{ postgresql_group }}"
|
||||
register: postgresql_ssl_config_file
|
||||
notify:
|
||||
- Reload PostgreSQL
|
||||
|
@ -7,7 +7,8 @@
|
||||
tags: postgresql_configuration
|
||||
|
||||
- name: "Manage TLS/SSL certificates"
|
||||
include_tasks: cacert.yaml
|
||||
#include_tasks: cacert.yaml
|
||||
include_tasks: ssl/main.yaml
|
||||
when: postgresql_ssl
|
||||
|
||||
- name: Include WAL-G role
|
||||
|
Reference in New Issue
Block a user