xoxys.postgres/defaults/main.yml
Robert Kaussow 8d147ff130
All checks were successful
continuous-integration/drone/push Build is passing
add lvm management
2019-06-20 15:55:07 +02:00

63 lines
2.0 KiB
YAML

---
postgres_repository_enabled: False
postgres_version: 10
postgres_repository_filename: "Postgresql-{{ postgres_version | regex_replace('\\.') }}"
postgres_user: postgres
postgres_group: postgres
# Create separate LVM storage for matrix
postgres_lvm_enabled: False
# This variables are only necessary if postgres_lvm_enabled is 'True'
# Set physical volumes to use in LVM
# postgres_lvm_pvs: # ['/dev/sdb', '/dev/sdc']
# postgres_lvm_vg: # "vg_matrix"
# postgres_lvm_lv: # "lv_matrix"
# postgres_lvm_fstype: # "ext4"
# postgres_lvm_size: # "50G"
# postgres_base_dir: # defaults to os default
# Available postgresql.conf options
postgres_log_destination:
- stderr
postgres_log_directory: log
postgres_log_filename: postgresql.log
postgres_log_rotation_age: 1d
postgres_log_rotation_size: 0
postgres_iptables_enabled: False
postgres_connection_port: 5432
postgres_connection_addresses:
- localhost
postgres_socket_directories:
- /var/run/postgresql
postgres_password_encryption: md5
# Enable and setup ssl transport security
postgres_tls_enabled: False
postgres_tls_cert_filename: "mycert.pem"
postgres_tls_key_filename: "mykey.pem"
postgres_tls_cert_source: mycert.pem
postgres_tls_key_source: mykey.pem
postgres_users: []
# - name: jdoe #required; the rest are optional
# password: # defaults to not set
# encrypted: # defaults to 'yes'
# priv: # defaults to not set
# role_attr_flags: # defaults to not set
# db: # defaults to not set
# login_host: # defaults to 'localhost'
# login_password: # defaults to not set
# login_user: # defaults to '{{ postgres_user }}'
# login_unix_socket: # defaults to 1st of postgres_socket_directories
# port: # defaults to not set
# state: # defaults to 'present'
# pam_user: # defaults to not set
postgres_hba_entries:
- {type: local, database: all, user: all, auth_method: peer}
- {type: host, database: all, user: all, address: '127.0.0.1/32', auth_method: md5}
- {type: host, database: all, user: all, address: '::1/128', auth_method: md5}