29 lines
1016 B
Plaintext
29 lines
1016 B
Plaintext
|
#jinja2: lstrip_blocks: True
|
||
|
|
{{ ansible_managed | comment }}
|
||
|
|
POSTGRES_ARGS=-c timezone='Etc/UTC' -c log_min_messages={{ postgres_log_level }} -c log_timezone='Etc/UTC' \
|
||
|
|
{% if postgres_tls_enabled %}
|
||
|
|
-c ssl=on \
|
||
|
|
{% if postgres_tls_ca_file is defined %}
|
||
|
|
-c ssl_ca_file='{{ postgres_tls_ca_file }}' \
|
||
|
|
{% endif %}
|
||
|
|
{% if postgres_tls_cert_file is defined %}
|
||
|
|
-c ssl_cert_file='{{ postgres_tls_cert_file }}' \
|
||
|
|
{% endif %}
|
||
|
|
{% if postgres_tls_key_file is defined %}
|
||
|
|
-c ssl_key_file='{{ postgres_tls_key_file }}' \
|
||
|
|
{% endif %}
|
||
|
|
-c ssl_ciphers='HIGH:MEDIUM:+3DES:!aNULL' \
|
||
|
|
-c ssl_prefer_server_ciphers=on \
|
||
|
|
-c ssl_ecdh_curve='prime256v1' \
|
||
|
|
-c ssl_min_protocol_version='TLSv1.2' \
|
||
|
|
{% else %}
|
||
|
|
-c ssl=off \
|
||
|
|
{% endif %}
|
||
|
|
-c datestyle='iso, mdy' \
|
||
|
|
-c lc_messages='en_US.UTF-8' \
|
||
|
|
-c lc_monetary='en_US.UTF-8' \
|
||
|
|
-c lc_numeric='en_US.UTF-8' \
|
||
|
|
-c lc_time='en_US.UTF-8' \
|
||
|
|
-c default_text_search_config='pg_catalog.english' \
|
||
|
|
-c port=5432
|