rewrite ssl cert generation

This commit is contained in:
ace
2024-03-19 14:05:41 +03:00
parent 7b924b24dd
commit 5fe171c8b0
25 changed files with 396 additions and 266 deletions

View File

@ -19,6 +19,6 @@ postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/{
postgresql_ssl_path: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}"
postgresql_package_name_regex: "{{ postgresql_package_name }}-{{ postgresql_version }}-{{ postgresql_version_build }}"
postgresql_cluster_name: "main"
postgresql_ssl_update_ca_command: "update-ca-certificates --fresh"
postgresql_ssl_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_cacert_update_ca_trust_command: "update-ca-certificates --fresh"
postgresql_cacert_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_unit_name: "postgresql@{{ postgresql_major_version}}-{{ postgresql_cluster_name }}"

View File

@ -19,6 +19,6 @@ postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/{
postgresql_ssl_path: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}"
postgresql_package_name_regex: "{{ postgresql_package_name }}-{{ postgresql_version }}-{{ postgresql_version_build }}"
postgresql_cluster_name: "main"
postgresql_ssl_update_ca_command: "update-ca-certificates --fresh"
postgresql_ssl_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_cacert_update_ca_trust_command: "update-ca-certificates --fresh"
postgresql_cacert_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_unit_name: "postgresql@{{ postgresql_major_version}}-{{ postgresql_cluster_name }}"

View File

@ -6,8 +6,8 @@ postgresql_home_dir: "/var/lib/pgsql"
postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/data"
postgresql_ssl_path: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}"
postgresql_ssl_update_ca_command: "update-ca-trust extract"
postgresql_ssl_ca_trust_dir: "/etc/pki/ca-trust/source/anchors"
postgresql_cacert_update_ca_trust_command: "update-ca-trust extract"
postgresql_cacert_ca_trust_dir: "/etc/pki/ca-trust/source/anchors"
postgresql_unit_name: "postgresql-{{ postgresql_major_version }}"
postgresql_deps_packages:
- python39

View File

@ -6,8 +6,8 @@ postgresql_home_dir: "/var/lib/pgsql"
postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/data"
postgresql_ssl_path: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}"
postgresql_ssl_update_ca_command: "update-ca-trust extract"
postgresql_ssl_ca_trust_dir: "/etc/pki/ca-trust/source/anchors"
postgresql_cacert_update_ca_trust_command: "update-ca-trust extract"
postgresql_cacert_ca_trust_dir: "/etc/pki/ca-trust/source/anchors"
postgresql_unit_name: "postgresql-{{ postgresql_major_version }}"
postgresql_deps_packages:
- python3

View File

@ -19,6 +19,6 @@ postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/{
postgresql_ssl_path: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}"
postgresql_package_name_regex: "{{ postgresql_package_name }}-{{ postgresql_version }}-{{ postgresql_version_build }}"
postgresql_cluster_name: "main"
postgresql_ssl_update_ca_command: "update-ca-certificates --fresh"
postgresql_ssl_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_cacert_update_ca_trust_command: "update-ca-certificates --fresh"
postgresql_cacert_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_unit_name: "postgresql@{{ postgresql_major_version}}-{{ postgresql_cluster_name }}"

View File

@ -19,6 +19,6 @@ postgresql_data_dir: "{{ postgresql_home_dir }}/{{ postgresql_major_version }}/{
postgresql_ssl_path: "{{ postgresql_config_dir }}/{{ postgresql_major_version }}/{{ postgresql_cluster_name }}"
postgresql_package_name_regex: "{{ postgresql_package_name }}-{{ postgresql_version }}-{{ postgresql_version_build }}"
postgresql_cluster_name: "main"
postgresql_ssl_update_ca_command: "update-ca-certificates --fresh"
postgresql_ssl_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_cacert_update_ca_trust_command: "update-ca-certificates --fresh"
postgresql_cacert_ca_trust_dir: "/usr/local/share/ca-certificates"
postgresql_unit_name: "postgresql@{{ postgresql_major_version}}-{{ postgresql_cluster_name }}"