From f352d36a11d8b9b6df6800dd15fe274b54d45703 Mon Sep 17 00:00:00 2001
From: shtlrs <amrbellalouna@gmail.com>
Date: Sat, 1 Jun 2024 20:20:59 +0200
Subject: add hba conf for metabase to connect to site

---
 ansible/roles/postgres/vars/main/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'ansible/roles/postgres')

diff --git a/ansible/roles/postgres/vars/main/main.yml b/ansible/roles/postgres/vars/main/main.yml
index c7b6996..cb8180f 100644
--- a/ansible/roles/postgres/vars/main/main.yml
+++ b/ansible/roles/postgres/vars/main/main.yml
@@ -16,6 +16,11 @@ postgres_users:
     roles:
       - pg_read_all_data
 
+  - name: metabase
+    password: "{{ vault_postgres_user_passwords.metabase }}"
+    roles:
+      - pg_read_all_data
+
   - name: bitwarden
     password: "{{ vault_postgres_user_passwords.bitwarden }}"
     roles:
@@ -107,6 +112,12 @@ postgres_hba_rules:
     address: all
     method: scram-sha-256
 
+  - conn_type: hostssl
+    database: site
+    user: metabase
+    address: all
+    method: scram-sha-256
+
   - conn_type: hostssl
     database: metricity
     user: grafana
-- 
cgit v1.2.3