mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-07-22 12:50:22 -07:00
Remove postgresql content for 2.0.0 (#1355)
* Remove postgresql content * add suggested * Update meta/runtime.yml Co-authored-by: Felix Fontein <felix@fontein.de> * Remove symlinks * Remove a consequence of rebasing * Remove ssl task from setup_postgresql_db Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
parent
31443e57b1
commit
72b59c764e
186 changed files with 61 additions and 27584 deletions
|
@ -240,8 +240,3 @@
|
|||
- name: Print PostgreSQL server version
|
||||
debug:
|
||||
msg: '{{ postgres_version_resp.stdout }}'
|
||||
|
||||
- import_tasks: ssl.yml
|
||||
when:
|
||||
- ansible_os_family == 'Debian'
|
||||
- postgres_version_resp.stdout is version('9.4', '>=')
|
||||
|
|
|
@ -1,66 +0,0 @@
|
|||
- name: postgresql SSL - create database
|
||||
become_user: '{{ pg_user }}'
|
||||
become: true
|
||||
postgresql_db:
|
||||
name: '{{ ssl_db }}'
|
||||
|
||||
- name: postgresql SSL - create role
|
||||
become_user: '{{ pg_user }}'
|
||||
become: true
|
||||
postgresql_user:
|
||||
name: '{{ ssl_user }}'
|
||||
role_attr_flags: SUPERUSER
|
||||
password: '{{ ssl_pass }}'
|
||||
|
||||
- name: postgresql SSL - install openssl
|
||||
become: true
|
||||
package: name=openssl state=present
|
||||
|
||||
- name: postgresql SSL - create certs 1
|
||||
become_user: root
|
||||
become: true
|
||||
shell: openssl req -new -nodes -text -out ~{{ pg_user }}/root.csr \ -keyout ~{{ pg_user }}/root.key -subj "/CN=localhost.local"
|
||||
|
||||
- name: postgresql SSL - create certs 2
|
||||
become_user: root
|
||||
become: true
|
||||
shell: openssl x509 -req -in ~{{ pg_user }}/root.csr -text -days 3650 \ -extensions v3_ca -signkey ~{{ pg_user }}/root.key -out ~{{ pg_user }}/root.crt
|
||||
|
||||
- name: postgresql SSL - create certs 3
|
||||
become_user: root
|
||||
become: true
|
||||
shell: openssl req -new -nodes -text -out ~{{ pg_user }}/server.csr \ -keyout ~{{ pg_user }}/server.key -subj "/CN=localhost.local"
|
||||
|
||||
- name: postgresql SSL - create certs 4
|
||||
become_user: root
|
||||
become: true
|
||||
shell: openssl x509 -req -in ~{{ pg_user }}/server.csr -text -days 365 \ -CA ~{{ pg_user }}/root.crt -CAkey ~{{ pg_user }}/root.key -CAcreateserial -out server.crt
|
||||
|
||||
- name: postgresql SSL - set right permissions to files
|
||||
become_user: root
|
||||
become: true
|
||||
file:
|
||||
path: '{{ item }}'
|
||||
mode: '0600'
|
||||
owner: '{{ pg_user }}'
|
||||
group: '{{ pg_user }}'
|
||||
with_items:
|
||||
- ~{{ pg_user }}/root.key
|
||||
- ~{{ pg_user }}/server.key
|
||||
- ~{{ pg_user }}/root.crt
|
||||
- ~{{ pg_user }}/server.csr
|
||||
|
||||
- name: postgresql SSL - enable SSL
|
||||
become_user: '{{ pg_user }}'
|
||||
become: true
|
||||
postgresql_set:
|
||||
login_user: '{{ pg_user }}'
|
||||
db: postgres
|
||||
name: ssl
|
||||
value: true
|
||||
|
||||
- name: postgresql SSL - reload PostgreSQL to enable ssl on
|
||||
become: true
|
||||
service:
|
||||
name: '{{ postgresql_service }}'
|
||||
state: reloaded
|
Loading…
Add table
Add a link
Reference in a new issue