mirror of
https://git.kaidan.im/lnj/ansible-role-ejabberd
synced 2020-03-25 15:46:19 +01:00
35 lines
768 B
YAML
35 lines
768 B
YAML
---
|
|
|
|
- name: Install postgresql packages
|
|
apt:
|
|
name:
|
|
- postgresql
|
|
- python-psycopg2
|
|
|
|
- name: Create database
|
|
postgresql_db:
|
|
name: '{{ ejabberd_db_name }}'
|
|
become_user: postgres
|
|
|
|
- name: Let user access database
|
|
postgresql_user:
|
|
db: '{{ ejabberd_db_name }}'
|
|
name: '{{ ejabberd_db_user }}'
|
|
password: '{{ ejabberd_db_password }}'
|
|
priv: ALL
|
|
become_user: postgres
|
|
|
|
- name: Revoke unnecessary privileges
|
|
postgresql_user:
|
|
name: '{{ ejabberd_db_user }}'
|
|
role_attr_flags: NOSUPERUSER,NOCREATEDB
|
|
become_user: postgres
|
|
|
|
- name: Make sure only this user can access the database
|
|
postgresql_privs:
|
|
db: '{{ ejabberd_db_name }}'
|
|
role: PUBLIC
|
|
type: database
|
|
priv: ALL
|
|
state: absent
|
|
become_user: postgres
|