ansible/xoxys.postgres
1
0
Fork 0
Code Issues Pull Requests Releases Activity

refactor tls path handling

Browse Source
This commit is contained in:
Robert Kaussow 2018-10-16 23:11:31 +02:00
parent 1192e6de7d
commit f607529f5c
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tasks/tls.yml
View File

@ -8,8 +8,8 @@
group: "{{ openhab_group }}" group: "{{ openhab_group }}"
recurse: True recurse: True
with_items: with_items:
- "{{ __postgres_tls_key_path }}" - "{{ __postgres_tls_key_path | dirname }}"
- "{{ __postgres_tls_cert_path }}" - "{{ __postgres_tls_cert_path | dirname }}"
become: True become: True
become_user: root become_user: root

4
templates/postgresql/data/postgresql.conf.j2
View File

@ -50,8 +50,8 @@ ssl = off
#ssl_prefer_server_ciphers = on #ssl_prefer_server_ciphers = on
#ssl_ecdh_curve = 'prime256v1' #ssl_ecdh_curve = 'prime256v1'
#ssl_dh_params_file = '' #ssl_dh_params_file = ''
ssl_cert_file = '{{ __postgres_tls_path }}/certs/{{ postgres_tls_cert_filename }}' ssl_cert_file = '{{ __postgres_tls_cert_path }}'
ssl_key_file = '{{ __postgres_tls_path }}/key/{{ postgres_tls_key_filename }}' ssl_key_file = '{{ __postgres_tls_key_path }}'
#ssl_ca_file = '' #ssl_ca_file = ''
#ssl_crl_file = '' #ssl_crl_file = ''
{% endif %} {% endif %}

4
vars/main.yml
View File

@ -8,5 +8,5 @@ __postgres_packages:
- "{{ __postgres_packagename }}-server" - "{{ __postgres_packagename }}-server"
__postgres_data_dir: "/var/lib/pgsql/{{ __postgres_version }}/data" __postgres_data_dir: "/var/lib/pgsql/{{ __postgres_version }}/data"
__postgres_config_path: "{{ __postgres_data_dir }}" __postgres_config_path: "{{ __postgres_data_dir }}"
__postgres_tls_key_path: "{{ __postgres_data_dir }}/tls/key" __postgres_tls_key_path: "{{ __postgres_data_dir }}/tls/key/{{ postgres_tls_key_filename }}"
__postgres_tls_cert_path: "{{ __postgres_data_dir }}/tls/key" __postgres_tls_cert_path: "{{ __postgres_data_dir }}/tls/certs/{{ postgres_tls_cert_filename }}"