Remove postgresql content for 2.0.0 (#1355)

* Remove postgresql content

* add suggested

* Update meta/runtime.yml

Co-authored-by: Felix Fontein <felix@fontein.de>

* Remove symlinks

* Remove a consequence of rebasing

* Remove ssl task from setup_postgresql_db

Co-authored-by: Felix Fontein <felix@fontein.de>
This commit is contained in:
Andrew Klychkov 2020-11-24 11:01:50 +03:00 committed by GitHub
commit 72b59c764e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
186 changed files with 61 additions and 27584 deletions

View file

@ -240,8 +240,3 @@
- name: Print PostgreSQL server version
debug:
msg: '{{ postgres_version_resp.stdout }}'
- import_tasks: ssl.yml
when:
- ansible_os_family == 'Debian'
- postgres_version_resp.stdout is version('9.4', '>=')

View file

@ -1,66 +0,0 @@
- name: postgresql SSL - create database
become_user: '{{ pg_user }}'
become: true
postgresql_db:
name: '{{ ssl_db }}'
- name: postgresql SSL - create role
become_user: '{{ pg_user }}'
become: true
postgresql_user:
name: '{{ ssl_user }}'
role_attr_flags: SUPERUSER
password: '{{ ssl_pass }}'
- name: postgresql SSL - install openssl
become: true
package: name=openssl state=present
- name: postgresql SSL - create certs 1
become_user: root
become: true
shell: openssl req -new -nodes -text -out ~{{ pg_user }}/root.csr \ -keyout ~{{ pg_user }}/root.key -subj "/CN=localhost.local"
- name: postgresql SSL - create certs 2
become_user: root
become: true
shell: openssl x509 -req -in ~{{ pg_user }}/root.csr -text -days 3650 \ -extensions v3_ca -signkey ~{{ pg_user }}/root.key -out ~{{ pg_user }}/root.crt
- name: postgresql SSL - create certs 3
become_user: root
become: true
shell: openssl req -new -nodes -text -out ~{{ pg_user }}/server.csr \ -keyout ~{{ pg_user }}/server.key -subj "/CN=localhost.local"
- name: postgresql SSL - create certs 4
become_user: root
become: true
shell: openssl x509 -req -in ~{{ pg_user }}/server.csr -text -days 365 \ -CA ~{{ pg_user }}/root.crt -CAkey ~{{ pg_user }}/root.key -CAcreateserial -out server.crt
- name: postgresql SSL - set right permissions to files
become_user: root
become: true
file:
path: '{{ item }}'
mode: '0600'
owner: '{{ pg_user }}'
group: '{{ pg_user }}'
with_items:
- ~{{ pg_user }}/root.key
- ~{{ pg_user }}/server.key
- ~{{ pg_user }}/root.crt
- ~{{ pg_user }}/server.csr
- name: postgresql SSL - enable SSL
become_user: '{{ pg_user }}'
become: true
postgresql_set:
login_user: '{{ pg_user }}'
db: postgres
name: ssl
value: true
- name: postgresql SSL - reload PostgreSQL to enable ssl on
become: true
service:
name: '{{ postgresql_service }}'
state: reloaded