ansible/playbooks/postgresql.yml

#!/usr/bin/env ansible-playbook
---
# Install and configure database servers at Saclay
- hosts: bdd.adm.auro.re
  vars:
    postgresql:
      version: 13
    postgresql_hosts:
      - database: nextcloud
        user: nextcloud
        net: 10.128.0.58/32
        method: md5
      - database: gitea
        user: gitea
        net: 10.128.0.60/32
        method: md5
      - database: wikijs
        user: wikijs
        net: 10.128.0.66/32
        method: md5
      - database: drone
        user: drone
        net: 10.128.0.64/32
        method: md5
      - database: netbox
        user: netbox
        net: 10.128.0.97/32
        method: md5
      - database: grafana
        user: grafana
        net: 10.128.0.98/32
        method: md5
    postgresql_databases:
      - nextcloud
      - gitea
      - wikijs
      - drone
      - netbox
      - grafana
    postgresql_users:
      - name: nextcloud
        database: nextcloud
        password: "{{ vault_postgresql_nextcloud_passwd }}"
        privs:
          - ALL
      - name: gitea
        database: gitea
        password: "{{ vault_postgresql_gitea_passwd }}"
        privs:
          - ALL
      - name: wikijs
        database: wikijs
        password: "{{ vault_postgresql_wikijs_passwd }}"
        privs:
          - ALL
      - name: drone
        database: drone
        password: "{{ vault_postgresql_drone_passwd }}"
        privs:
          - ALL
      - name: netbox
        database: netbox
        password: "{{ vault_postgresql_netbox_passwd }}"
        privs:
          - ALL
      - name: grafana
        database: grafana
        password: "{{ vault_postgresql_grafana_passwd }}"
        privs:
          - ALL
    update_motd:
      postgresql: PostgreSQL est déployé.
  roles:
    - postgresql
    - update_motd

# Install and configure database servers at OVH
- hosts: bdd-ovh.adm.auro.re
  vars:
    postgresql:
      version: 13
    postgresql_hosts:
      - database: etherpad
        user: etherpad
        net: 10.128.0.150/32
        method: md5
      - database: codimd
        user: codimd
        net: 10.128.0.150/32
        method: md5
      - database: synapse
        user: synapse
        net: 10.128.0.56/32
        method: md5
      - database: kanboard
        user: kanboard
        net: 10.128.0.150/32
        method: md5
      - database: cas
        user: cas
        net: 10.128.0.150/32
        method: md5
    postgresql_databases:
      - synapse
      - codimd
      - etherpad
      - kanboard
      - cas
    postgresql_users:
      - name: synapse
        database: synapse
        password: "{{ vault_postgresql_synapse_passwd }}"
        privs:
          - ALL
      - name: codimd
        database: codimd
        password: "{{ vault_postgresql_codimd_passwd }}"
        privs:
          - ALL
      - name: etherpad
        database: etherpad
        password: "{{ vault_postgresql_etherpad_passwd }}"
        privs:
          - ALL
      - name: kanboard
        database: kanboard
        password: "{{ vault_postgresql_kanboard_passwd }}"
        privs:
          - ALL
      - name: cas
        database: cas
        password: "{{ vault_postgresql_cas_passwd }}"
        privs:
          - ALL
    update_motd:
      postgresql: PostgreSQL est déployé.
  roles:
    - postgresql
    - update_motd
...