Git initial commit

roles/postgres/tasks/main.yml

@@ -0,0 +1,41 @@
+---
+- name: install requirements for postgresql
+  apt:
+    update_cache: yes
+    state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
+    install_recommends: yes
+    pkg:
+      - apt-transport-https
+      - ca-certificates
+      - gnupg2
+      - software-properties-common
+      - curl
+
+- name: setup PostgreSQL repository
+  copy:
+    content: "deb http://apt.postgresql.org/pub/repos/apt {{ ansible_lsb.codename }}-pgdg main"
+    dest: "/etc/apt/sources.list.d/pgdg.list"
+
+- name: setup PostgreSQL repository signing key
+  apt_key: 
+    url: https://www.postgresql.org/media/keys/ACCC4CF8.asc
+    state: present
+
+- name: install PostgreSQL packages
+  apt:
+    name: "{{ pkg }}"
+    state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
+    install_recommends: yes
+    update_cache: yes
+  loop: 
+    - "{{ postgresql_version }}"
+  loop_control:
+    loop_var: pkg
+    label: "{{ pkg }}"
+
+- name: Setup databases based on PostgreSQL conf
+  include_tasks: setup_db.yml
+  loop: "{{ db_configs | json_query('[?type==`pgsql`]') }}"
+  loop_control:
+    loop_var: db
+    label: "{% if 'dbname' in db %}{{ db.dbname }}{% elif 'dbuser' in db %}{{ db.dbuser }}{% else %}::pass_redacted::{% endif %}"

roles/postgres/tasks/setup_db.yml

@@ -0,0 +1,41 @@
+---
+- name: set DB related config options
+  set_fact:
+    local_db_name: "{{ db.name if 'name' in db else 'noentry' }}"
+    local_db_user: "{{ db.user if 'user' in db else 'noentry'}}"
+    local_db_pass: "{{ db.pass if 'pass' in db else 'noentry'}}"
+    local_db_user_privs: "{{ db.priv if 'priv' in db else 'all'}}"
+
+- name: "create {{ local_db_user }} user"
+  postgresql_user:
+    state: present
+    name: "{{ local_db_user }}"
+    password: "{{ local_db_pass }}"
+  become: yes
+  become_user: "{{ psql_user }}"
+  when:
+    - local_db_user != 'noentry'
+    - local_db_pass != 'noentry'
+
+- name: "setup {{ local_db_name }} database"
+  postgresql_db:
+    state: present
+    name: "{{ local_db_name }}"
+    owner: "{{ local_db_user }}"
+  become: yes
+  become_user: "{{ psql_user }}"
+  when:
+    - local_db_name != 'noentry'
+
+- name: "Grant {{ local_db_user }} user access to {{ local_db_name }} database"
+  postgresql_privs:
+    type: database
+    database: "{{ local_db_name }}"
+    roles: "{{ local_db_user }}"
+    grant_option: yes
+    privs: "{{ local_db_user_privs }}"
+  become: yes
+  become_user: "{{ psql_user }}"
+  when:
+    - local_db_name != 'noentry'
+    - local_db_user != 'noentry'