mirror of
https://github.com/matter-labs/ansible-en-role.git
synced 2025-12-06 02:49:55 +00:00
61 lines
2.0 KiB
YAML
61 lines
2.0 KiB
YAML
---
|
|
|
|
- name: Install libpq-dev packages
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
name: libpq-dev
|
|
|
|
- name: Install psycopg2 python package
|
|
ansible.builtin.pip:
|
|
name: psycopg2
|
|
|
|
- name: Grant user replication access for replication.
|
|
community.postgresql.postgresql_pg_hba:
|
|
dest: "{{ storage_directory }}/postgres/pg_hba.conf"
|
|
contype: host
|
|
users: "{{ postgres_replica_user_name }}"
|
|
source: "{{ postgres_replica_address }}/32"
|
|
databases: replication
|
|
method: "{{ postgres_replica_auth_method }}"
|
|
|
|
- name: Create postgres replication user
|
|
community.postgresql.postgresql_user:
|
|
login_host: "{{ postgres_replication_bind_address }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
name: "{{ postgres_replica_user_name }}"
|
|
password: "{{ postgres_replica_user_password }}"
|
|
role_attr_flags: "REPLICATION"
|
|
|
|
- name: Create replication slot if doesn't exist
|
|
community.postgresql.postgresql_slot:
|
|
login_host: "{{ postgres_replication_bind_address }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
slot_name: replica
|
|
|
|
- name: Reload postgres configuration
|
|
community.postgresql.postgresql_query:
|
|
login_host: "{{ postgres_replication_bind_address }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
query: "SELECT pg_reload_conf()"
|
|
|
|
- name: Create postgres backup user
|
|
community.postgresql.postgresql_user:
|
|
login_host: "{{ postgres_replication_bind_address }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
name: "{{ backup_db_user }}"
|
|
password: "{{ backup_db_password }}"
|
|
|
|
- name: Grant role pg_read_all_data to backup user
|
|
community.postgresql.postgresql_membership:
|
|
login_host: "{{ postgres_replication_bind_address }}"
|
|
login_user: "{{ database_username }}"
|
|
login_password: "{{ database_password }}"
|
|
group: pg_read_all_data
|
|
target_roles:
|
|
- "{{ backup_db_user }}"
|
|
state: present
|