29 lines
942 B
YAML
29 lines
942 B
YAML
---
|
|
- name: Set username and password
|
|
ansible.builtin.set_fact:
|
|
username: "{{ postgres_users_username }}"
|
|
password: "{{ postgres_users_password }}"
|
|
database: "{{ postgres_users_database | default(postgres_users_username) }}"
|
|
schema: "{{ postgres_users_schema | default('public') }}"
|
|
- name: Create DB, role, and privs
|
|
become: true
|
|
become_user: postgres
|
|
block:
|
|
- name: Create database
|
|
community.postgresql.postgresql_db:
|
|
name: "{{ database }}"
|
|
owner: "{{ username }}"
|
|
- name: Create user
|
|
community.postgresql.postgresql_user:
|
|
db: "{{ database }}"
|
|
name: "{{ username }}"
|
|
password: "{{ password }}"
|
|
environment:
|
|
PGOPTIONS: "-c password_encryption=scram-sha-256"
|
|
- name: Configure privileges
|
|
community.postgresql.postgresql_privs:
|
|
db: "{{ database }}"
|
|
role: "{{ username }}"
|
|
privs: ALL
|
|
objs: ALL_IN_SCHEMA
|