more postgreSQL ansible WIP

Former-commit-id: 70427797cdda9c19a8386a9425f40aa162dd1a2e

ansible/deploy.yaml

@@ -2,6 +2,10 @@
 - hosts: all
   become: yes
   gather_facts: yes
+  vars:
+    dbname: ippidb
+    dbuser: ippidb
+    dbpassword: 'LeroyMerlin'
   tasks:
     #
     # Install basic non-virtualenv requirements
@@ -72,22 +76,14 @@
                   insertbefore=BOF
     - name: restart postgresql service
       systemd: state=restarted name=postgresql enabled=yes
-    - become: yes
-      become_user: ippidb
-      gather_facts: no
-      vars:
-        dbname: ippidb
-        dbuser: ippidb
-        dbpassword: 'LeroyMerlin'
-      tasks:
-      - name: ensure database is created
-        postgresql_db: name={{dbname}}
-      - name: ensure user has access to database
-        postgresql_user: db={{dbname}} name={{dbuser}} password={{dbpassword}} priv=ALL
-      - name: ensure user does not have unnecessary privilege
-        postgresql_user: name={{dbuser}} role_attr_flags=NOSUPERUSER,NOCREATEDB
-      - name: ensure no other user can access the database
-        postgresql_privs: db={{dbname}} role=PUBLIC type=database priv=ALL state=absent
+    - name: ensure database is created
+      postgresql_db: name={{dbname}}
+    - name: ensure user has access to database
+      postgresql_user: db={{dbname}} name={{dbuser}} password={{dbpassword}} priv=ALL
+    - name: ensure user does not have unnecessary privilege
+      postgresql_user: name={{dbuser}} role_attr_flags=NOSUPERUSER,NOCREATEDB
+    - name: ensure no other user can access the database
+      postgresql_privs: db={{dbname}} role=PUBLIC type=database priv=ALL state=absent
     #
     # Stop web server(s)
     #