9 Commits

Author SHA1 Message Date
c497fc0982 Merge pull request #37 from matter-labs/yorik-patch-1
Some checks failed
Release / Release (push) Has been cancelled
CI / Lint (push) Has been cancelled
CI / Ansible lint (push) Has been cancelled
feat: Fake PR to force release
2024-12-04 15:49:30 +01:00
57f3fb74e4 feat: Fake PR to force release 2024-12-04 15:47:39 +01:00
aa018348d8 Merge pull request #36 from matter-labs/gprusak-rate-limit
feat(consensus): bumped inbound connections limit
2024-12-04 15:04:28 +01:00
b8e3b89cf5 bumped inbound connections limit 2024-12-03 17:47:46 +01:00
d276d7b290 Merge pull request #35 from matter-labs/backup-user
Some checks failed
Release / Release (push) Has been cancelled
CI / Lint (push) Has been cancelled
CI / Ansible lint (push) Has been cancelled
feat: Added user with backup permissions only
2024-11-27 15:45:36 +01:00
60333c40da feat: Added user with backup permissions only 2024-11-27 15:24:20 +01:00
2eb2b1f6d4 feat: Added user with backup permissions only 2024-11-27 15:12:12 +01:00
69777ac4e8 feat: Added user with backup permissions only 2024-11-27 15:08:46 +01:00
46e2a6e0e4 feat: Added user with backup permissions only 2024-11-27 14:51:33 +01:00
3 changed files with 28 additions and 6 deletions

View File

@ -64,6 +64,9 @@ postgres_replica_user_password: ""
postgres_replica_auth_method: "scram-sha-256" postgres_replica_auth_method: "scram-sha-256"
postgres_replication_bind_address: "" postgres_replication_bind_address: ""
postgres_replica_address: "" postgres_replica_address: ""
backup_db_user: ""
backup_db_password: ""
backup_db_name: ""
# Enable TLS for traefik # Enable TLS for traefik
enable_tls: false enable_tls: false

View File

@ -40,3 +40,21 @@
login_user: "{{ database_username }}" login_user: "{{ database_username }}"
login_password: "{{ database_password }}" login_password: "{{ database_password }}"
query: "SELECT pg_reload_conf()" query: "SELECT pg_reload_conf()"
- name: Create postgres backup user
community.postgresql.postgresql_user:
login_host: "{{ postgres_replication_bind_address }}"
login_user: "{{ database_username }}"
login_password: "{{ database_password }}"
name: "{{ backup_db_user }}"
password: "{{ backup_db_password }}"
- name: Grant role pg_read_all_data to backup user
community.postgresql.postgresql_membership:
login_host: "{{ postgres_replication_bind_address }}"
login_user: "{{ database_username }}"
login_password: "{{ database_password }}"
group: pg_read_all_data
target_roles:
- "{{ backup_db_user }}"
state: present

View File

@ -1,9 +1,10 @@
server_addr: '0.0.0.0:3054' server_addr: '0.0.0.0:3054'
public_addr: '{{ ansible_default_ipv4.address }}:{{ consensus_port }}' public_addr: '{{ ansible_default_ipv4.address }}:{{ consensus_port }}'
max_payload_size: 5000000 max_payload_size: 5000000
gossip_dynamic_inbound_limit: 100 gossip_dynamic_inbound_limit: 200
gossip_static_outbound: rpc_config:
{% for item in consensus_outbound %} get_block_rate:
- key: {{ item.key }} burst: 5
addr: {{ item.addr }} refresh: # 0.2s
{% endfor %} seconds: 0
nanos: 200000000