blob: 715782c5a2ed5f8ba580314b945dd3272dfc4c45 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
- user: name=postgres append=yes groups=ssl-cert
- name: Creates .ssh directory
file: path=/var/lib/postgresql/.ssh state=directory owner=postgres group=postgres mode=0700
- name: Create postgres SSH key
command: ssh-keygen -b 4096 -f /var/lib/postgresql/.ssh/id_rsa -N "" -q
become: yes
become_user: postgres
become_method: su
args:
creates: /var/lib/postgresql/.ssh/id_rsa
- slurp:
src: /var/lib/postgresql/.ssh/id_rsa.pub
register: db_server_pub_key
- name: Check if barman is installed on barman server
getent:
database: passwd
key: "barman"
delegate_to: "{{ postgres_barman_server_public|default(postgres_barman_server) }}"
when: postgres_barman_server is defined
register: barman_user_exists
ignore_errors: true
changed_when: false
- name: Allow SSH access on barman server
authorized_key:
user: "barman"
key: "{{ db_server_pub_key['content']|b64decode }}"
state: present
delegate_to: "{{ postgres_barman_server_public|default(postgres_barman_server) }}"
when:
- postgres_barman_server is defined
- barman_user_exists is succeeded
- name: Copy logrotate configuration for postgresql
template: src=logrotate-postgresql-common.j2 dest=/etc/logrotate.d/postgresql-common owner=root group=root mode=0644
- name: Create /root/scripts needed directory
file: path=/root/scripts/ state=directory
- name: Create pgbadger user
user: name=pgbadger home=/home/pgbadger
when: postgres_pgbadger_server is defined and postgres_pgbadger_server
- name: Copy pbBadger script
template: src=pgBadger.sh.j2 dest=/root/scripts/pgBadger.sh owner=root group=root mode=0755
when: postgres_pgbadger_server is defined and postgres_pgbadger_server
- name: Ensure dedicated log directory is owned by postgres
file: path={{ postgres_log_dir }} state=directory owner=postgres group=postgres
when: postgres_log_dir is defined and postgres_log_dir
- name: Ensure dedicated data directory is owned by postgres
file: path={{ postgres_data_dir }} state=directory owner=postgres group=postgres
when: postgres_data_dir is defined and postgres_data_dir
|
