add PostGreSQL conf setup to ansible

Former-commit-id: 480e23ffaa55fea2d42e885a01f027a324e27e97

ansible/deploy.yaml

@@ -72,6 +72,25 @@
                   insertbefore=BOF
     - name: restart postgresql service
       systemd: state=restarted name=postgresql enabled=yes
+    - become: yes
+      become_user: ippidb
+      gather_facts: no
+      vars:
+        dbname: ippidb
+        dbuser: ippidb
+        dbpassword: 'LeroyMerlin'
+      tasks:
+      - name: ensure database is created
+        postgresql_db: name={{dbname}}
+    
+      - name: ensure user has access to database
+        postgresql_user: db={{dbname}} name={{dbuser}} password={{dbpassword}} priv=ALL
+    
+      - name: ensure user does not have unnecessary privilege
+        postgresql_user: name={{dbuser}} role_attr_flags=NOSUPERUSER,NOCREATEDB
+      
+      - name: ensure no other user can access the database
+postgresql_privs: db={{dbname}} role=PUBLIC type=database priv=ALL state=absent
     #
     # Stop web server(s)
     #