ansible/playbooks/postgresql.yml

#!/usr/bin/env ansible-playbook
---
# Install and configure database servers at Saclay
- hosts: bdd.adm.auro.re
  vars:
    postgresql:
      version: 13
      hosts:
        - database: nextcloud
          user: nextcloud
          net: 10.128.0.58/32
          method: md5
        - database: gitea
          user: gitea
          net: 10.128.0.60/32
          method: md5
        - database: wikijs
          user: wikijs
          net: 10.128.0.66/32
          method: md5
        - database: drone
          user: drone
          net: 10.128.0.64/32
          method: md5
        - database: netbox
          user: netbox
          net: 10.128.0.97/32
          method: md5
        - database: grafana
          user: grafana
          net: 10.128.0.98/32
          method: md5
        - database: dolibarr
          user: dolibarr
          net: 10.128.0.236/32
          method: md5
        - database: rt5
          user: rt5
          net: 10.128.0.123/32
          method: md5
      databases:
        - nextcloud
        - gitea
        - wikijs
        - drone
        - netbox
        - grafana
        - dolibarr
        - rt5
      users:
        - name: nextcloud
          database: nextcloud
          password: "{{ vault_postgresql_nextcloud_passwd }}"
          privs:
            - ALL
        - name: gitea
          database: gitea
          password: "{{ vault_postgresql_gitea_passwd }}"
          privs:
            - ALL
        - name: wikijs
          database: wikijs
          password: "{{ vault_postgresql_wikijs_passwd }}"
          privs:
            - ALL
        - name: drone
          database: drone
          password: "{{ vault_postgresql_drone_passwd }}"
          privs:
            - ALL
        - name: netbox
          database: netbox
          password: "{{ vault_postgresql_netbox_passwd }}"
          privs:
            - ALL
        - name: grafana
          database: grafana
          password: "{{ vault_postgresql_grafana_passwd }}"
          privs:
            - ALL
        - name: dolibarr
          database: dolibarr
          password: "{{ vault_postgresql_dolibarr_passwd }}"
          privs:
            - ALL
        - name: rt5
          database: rt5
          password: "{{ vault_postgresql_rt5_passwd }}"
          privs:
            - ALL
    update_motd:
      postgresql: PostgreSQL est déployé.
  roles:
    - postgresql
    - update_motd

# Install and configure database servers at OVH
- hosts: bdd-ovh.adm.auro.re
  vars:
    postgresql:
      version: 13
      hosts:
        - database: etherpad
          user: etherpad
          net: 10.128.0.150/32
          method: md5
        - database: codimd
          user: codimd
          net: 10.128.0.150/32
          method: md5
        - database: synapse
          user: synapse
          net: 10.128.0.56/32
          method: md5
        - database: kanboard
          user: kanboard
          net: 10.128.0.150/32
          method: md5
        - database: cas
          user: cas
          net: 10.128.0.150/32
          method: md5
        - database: appservice-discord
          user: appservice-discord
          net: 10.128.0.150/32
          method: md5
      databases:
        - synapse
        - codimd
        - etherpad
        - kanboard
        - cas
        - appservice-discord
      users:
        - name: synapse
          database: synapse
          password: "{{ vault_postgresql_synapse_passwd }}"
          privs:
            - ALL
        - name: codimd
          database: codimd
          password: "{{ vault_postgresql_codimd_passwd }}"
          privs:
            - ALL
        - name: etherpad
          database: etherpad
          password: "{{ vault_postgresql_etherpad_passwd }}"
          privs:
            - ALL
        - name: kanboard
          database: kanboard
          password: "{{ vault_postgresql_kanboard_passwd }}"
          privs:
            - ALL
        - name: cas
          database: cas
          password: "{{ vault_postgresql_cas_passwd }}"
          privs:
            - ALL
        - name: appservice-discord
          database: appservice-discord
          password: "{{ vault_postgresql_appservice_discord_passwd }}"
          privs:
            - ALL
    update_motd:
      postgresql: PostgreSQL est déployé.
  roles:
    - postgresql
    - update_motd
...