aboutsummaryrefslogtreecommitdiffstats
path: root/ansible/roles/postgres
diff options
context:
space:
mode:
authorGravatar shtlrs <[email protected]>2024-05-15 19:55:52 +0200
committerGravatar Chris Lovering <[email protected]>2024-05-16 20:22:18 +0100
commitf9d9c29ba21dcbf6ec69907eb2dd196f1d75e229 (patch)
treeda6503fae62d1de92e0dd1e4c4c79751a55df50d /ansible/roles/postgres
parentReadd nftables submodule (diff)
define the blackbox user and its db roles
Diffstat (limited to 'ansible/roles/postgres')
-rw-r--r--ansible/roles/postgres/vars/main/db_passwords.yml25
-rw-r--r--ansible/roles/postgres/vars/main/main.yml6
2 files changed, 20 insertions, 11 deletions
diff --git a/ansible/roles/postgres/vars/main/db_passwords.yml b/ansible/roles/postgres/vars/main/db_passwords.yml
index 05470e6..6c31909 100644
--- a/ansible/roles/postgres/vars/main/db_passwords.yml
+++ b/ansible/roles/postgres/vars/main/db_passwords.yml
@@ -1,12 +1,15 @@
$ANSIBLE_VAULT;1.1;AES256
-35383734613837346262376634346130336162323466346264616131666338313037323633323963
-3435333265323531373933636363303839653739363134640a663864633333663636623439393631
-63663162336164333430646239653963363461386633613934353031616230376464616262303930
-3365663532356637620a356538333032656334326338353536346330656364316430653231366438
-30336661313035383132646134393561333038343536393834306266376362313666343036623936
-38333135313136623232376565663235303734613436356565393066396661373765623836646437
-65333761633863636164353033306131303262383339353362313638353731353162643733653938
-64356132663066656538643561626635376265373735353934353433653762343465643762613732
-62333539333961366539326331383837396666643862643432303766363661303934363732663163
-38353131343531373361383136346563333861303266366363313461313135386335353535303564
-613834613162653031653832363431386364
+33376564336164313533613136396638396332383132366634373361303361643631353663646538
+6132653061306166356238396636656538356164343765380a316134626534363566363237373162
+66383963323931646230353265613764313062616466616465653066613636633233613038626239
+3133373631626531330a656330336466616165623161303963376538616331343032376461663237
+32306664356464376437623138393530643436303465353336613465353963356665303032366134
+65373166376339666138393835383863326138663536383039373438356634373534306332656231
+30656531623561353161616334323739373533363034663936376430316132316166396665376537
+61623131383037633432356538616434333139646465383432366132653636306233653865633134
+34663633386266323634366134356166346634333063323230336666373366343134353733303732
+39653137646132613635623531343464653931323262333534393766623132613938303763646636
+35343137656262313236343434393462383464393664333736383861383363313861363636653739
+31653439336365316466613065623063306635653336336565323539343061616163323235336463
+64303335623465303462613332303330666433333538316165333561663537386635653130663432
+6437633131326534656664353332623163653664373965633330
diff --git a/ansible/roles/postgres/vars/main/main.yml b/ansible/roles/postgres/vars/main/main.yml
index 8611950..f532863 100644
--- a/ansible/roles/postgres/vars/main/main.yml
+++ b/ansible/roles/postgres/vars/main/main.yml
@@ -5,6 +5,12 @@ postgres_user: "postgres"
postgres_users:
- name: pinnwand
password: "{{ vault_postgres_user_passwords.pinnwand }}"
+ roles:
+
+ - name: blackbox
+ password: "{{ vault_postgres_user_passwords.blackbox }}"
+ roles:
+ - pg_read_all_data
postgres_databases: