diff --git a/ansible/deploy.yaml b/ansible/deploy.yaml index 2e70609323cd3a8326f4715e20d4e242d85a5bf8..64e31fc86c049031d6fa9abc8f95ce219ba7b40a 100644 --- a/ansible/deploy.yaml +++ b/ansible/deploy.yaml @@ -71,7 +71,7 @@ - name: Ensure PostgreSQL is listening on all localhost lineinfile: dest=/var/lib/pgsql/data/postgresql.conf regexp='^#?listen_addresses\s*=' - line="listen_addresses = '127.0.0.1'" + line="listen_addresses = '*'" state=present - lineinfile: dest=/var/lib/pgsql/data/pg_hba.conf regexp='host\s+all\s+all\s+127.0.0.1/32\s+md5' @@ -79,14 +79,10 @@ insertbefore=BOF - name: restart postgresql service systemd: state=restarted name=postgresql enabled=yes - - name: ensure database is created - postgresql_db: name={{dbname}} - - name: ensure user has access to database - postgresql_user: db={{dbname}} name={{dbuser}} password={{dbpassword}} priv=ALL - - name: ensure user does not have unnecessary privilege - postgresql_user: name={{dbuser}} role_attr_flags=NOSUPERUSER,NOCREATEDB - - name: ensure no other user can access the database - postgresql_privs: db={{dbname}} role=PUBLIC type=database priv=ALL state=absent + - postgresql_user: + name: {{dbuser}} + password: {{dbpassword}} + role_attr_flags: CREATEDB,NOSUPERUSER # # Stop web server(s) #