mirror of
https://github.com/matter-labs/ansible-en-role.git
synced 2025-12-06 10:59:56 +00:00
Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 64198202a5 | |||
| 0d1717f38a | |||
| 13ef869339 | |||
| cfbaed74f0 | |||
| 6f1e025785 | |||
| f347a9173e | |||
| 2bf98e9273 |
@ -56,6 +56,11 @@ postgres_arguments:
|
|||||||
- max_parallel_maintenance_workers=4
|
- max_parallel_maintenance_workers=4
|
||||||
- -c
|
- -c
|
||||||
- checkpoint_timeout=1800
|
- checkpoint_timeout=1800
|
||||||
|
enable_postgres_replication: false
|
||||||
|
# IP address of the interface replication
|
||||||
|
postgres_replications_arguments: []
|
||||||
|
postgres_replication_bind_address: ""
|
||||||
|
postgres_replica_address: ""
|
||||||
|
|
||||||
# Enable TLS for traefik
|
# Enable TLS for traefik
|
||||||
enable_tls: false
|
enable_tls: false
|
||||||
|
|||||||
@ -57,6 +57,15 @@
|
|||||||
destination_port: "{{ consensus_port }}"
|
destination_port: "{{ consensus_port }}"
|
||||||
jump: ACCEPT
|
jump: ACCEPT
|
||||||
|
|
||||||
|
- name: Allow postgres replication traffic from replica only
|
||||||
|
when: enable_postgres_replication
|
||||||
|
ansible.builtin.iptables:
|
||||||
|
chain: INPUT
|
||||||
|
protocol: tcp
|
||||||
|
destination_port: 5432
|
||||||
|
source: "{{ postgres_replica_address }}"
|
||||||
|
jump: ACCEPT
|
||||||
|
|
||||||
- name: Set default policy to DROP
|
- name: Set default policy to DROP
|
||||||
ansible.builtin.iptables:
|
ansible.builtin.iptables:
|
||||||
chain: INPUT
|
chain: INPUT
|
||||||
|
|||||||
@ -32,6 +32,21 @@
|
|||||||
- l2_chain_id
|
- l2_chain_id
|
||||||
- l1_chain_id
|
- l1_chain_id
|
||||||
|
|
||||||
|
- name: "Verify that required variables for replication is set"
|
||||||
|
when: enable_postgres_replication
|
||||||
|
ansible.builtin.assert:
|
||||||
|
that:
|
||||||
|
- postgress_replication_required_var != ""
|
||||||
|
fail_msg: "{{ postgress_replication_required_var }} needs to be set for the role for postgres replication to work"
|
||||||
|
success_msg: "Required variable for postgres replication {{ postgress_replication_required_var }} isn't empty"
|
||||||
|
loop_control:
|
||||||
|
loop_var: postgress_replication_required_var
|
||||||
|
with_items:
|
||||||
|
- enable_postgres_replication
|
||||||
|
- postgres_replication_bind_address
|
||||||
|
- postgres_replica_address
|
||||||
|
- postgres_replications_arguments
|
||||||
|
|
||||||
- name: Check required en vars empty
|
- name: Check required en vars empty
|
||||||
ansible.builtin.fail:
|
ansible.builtin.fail:
|
||||||
msg: "Variable '{{ item }}' is empty"
|
msg: "Variable '{{ item }}' is empty"
|
||||||
|
|||||||
@ -43,12 +43,23 @@ services:
|
|||||||
- ./restore_dump.sh:/docker-entrypoint-initdb.d/restore_dump.sh
|
- ./restore_dump.sh:/docker-entrypoint-initdb.d/restore_dump.sh
|
||||||
env_file:
|
env_file:
|
||||||
- postgres.env
|
- postgres.env
|
||||||
|
{% if enable_postgres_replication %}
|
||||||
|
environment:
|
||||||
|
POSTGRES_HOST_AUTH_METHOD: "host replication replicator {{ postgres_replica_address }}/32 md5"
|
||||||
|
ports:
|
||||||
|
- "{{ postgres_replication_interface }}:5432:5432"
|
||||||
|
{% endif %}
|
||||||
command:
|
command:
|
||||||
- postgres
|
- postgres
|
||||||
- -c
|
- -c
|
||||||
{% for argument in postgres_arguments %}
|
{% for argument in postgres_arguments %}
|
||||||
- {{ argument }}
|
- {{ argument }}
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
{% if enable_postgres_replication %}
|
||||||
|
{% for repl_argument in postgres_replications_arguments %}
|
||||||
|
- {{ repl_argument }}
|
||||||
|
{% endfor %}
|
||||||
|
{% endif %}
|
||||||
external_node:
|
external_node:
|
||||||
{% if not external_node_raw_docker_tag %}
|
{% if not external_node_raw_docker_tag %}
|
||||||
image: "matterlabs/external-node:v{{ external_node_version }}"
|
image: "matterlabs/external-node:v{{ external_node_version }}"
|
||||||
|
|||||||
Reference in New Issue
Block a user