taperole 1.0.0 → 1.0.1

data/vendor/ANXS.postgresql/tasks/databases.yml

@@ -0,0 +1,67 @@
+# file: postgresql/tasks/databases.yml
+
+- name: PostgreSQL | Ensure PostgreSQL is running
+  service:
+    name: postgresql
+    state: started
+
+- name: PostgreSQL | Make sure the PostgreSQL databases are present
+  postgresql_db:
+    name: "{{item.name}}"
+    owner: "{{postgresql_database_owner}}"
+    encoding: "{{postgresql_encoding}}"
+    lc_collate: "{{postgresql_locale}}"
+    lc_ctype: "{{postgresql_locale}}"
+    port: "{{postgresql_port}}"
+    template: "template0"
+    state: present
+    login_user: "{{postgresql_admin_user}}"
+  sudo: yes
+  sudo_user: "{{postgresql_admin_user}}"
+  with_items: postgresql_databases
+  when: postgresql_databases|length > 0
+
+- name: PostgreSQL | Add hstore to the databases with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{postgresql_admin_user}} -c 'CREATE EXTENSION IF NOT EXISTS hstore;'"
+  with_items: postgresql_databases
+  when: item.hstore is defined and item.hstore
+
+- name: PostgreSQL | Add uuid-ossp to the database with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{postgresql_admin_user}} -c 'CREATE EXTENSION IF NOT EXISTS \"uuid-ossp\";'"
+  with_items: postgresql_databases
+  register: uuid_ext_result
+  failed_when: uuid_ext_result.rc != 0 and ("already exists, skipping" not in uuid_ext_result.stderr)
+  changed_when: uuid_ext_result.rc == 0 and ("already exists, skipping" not in uuid_ext_result.stderr)
+  when: item.uuid_ossp is defined and item.uuid_ossp
+
+- name: PostgreSQL | Add postgis to the databases with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{postgresql_admin_user}} -c 'CREATE EXTENSION IF NOT EXISTS postgis;'&&psql {{item.name}} -c 'CREATE EXTENSION IF NOT EXISTS postgis_topology;'"
+  with_items: postgresql_databases
+  when: item.gis is defined and item.gis
+
+- name: postgresql | add cube to the database with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{ postgresql_admin_user }} -c 'create extension if not exists cube;'"
+  with_items: postgresql_databases
+  when: item.cube is defined and item.cube
+
+- name: PostgreSQL | Add plpgsql to the database with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{ postgresql_admin_user }} -c 'CREATE EXTENSION IF NOT EXISTS plpgsql;'"
+  with_items: postgresql_databases
+  when: item.plpgsql is defined and item.plpgsql
+
+- name: postgresql | add earthdistance to the database with the requirement
+  sudo: yes
+  sudo_user: "{{ postgresql_service_user }}"
+  shell: "psql {{item.name}} --username {{ postgresql_admin_user }} -c 'create extension if not exists earthdistance;'"
+  with_items: postgresql_databases
+  when: item.earthdistance is defined and item.earthdistance

data/vendor/ANXS.postgresql/tasks/extensions/contrib.yml

@@ -0,0 +1,11 @@
+# file: postgresql/tasks/extensions/contrib.yml
+
+- name: PostgreSQL | Extensions | Make sure the postgres contrib extensions are installed
+  apt:
+    name: "postgresql-contrib-{{postgresql_version}}"
+    state: present
+    update_cache: yes
+    cache_valid_time: "{{apt_cache_valid_time | default (3600)}}"
+  notify:
+    - restart postgresql
+

data/vendor/ANXS.postgresql/tasks/extensions/dev_headers.yml

@@ -0,0 +1,10 @@
+# file: postgresql/tasks/extensions/dev_headers.yml
+
+- name: PostgreSQL | Extensions | Make sure the development headers are installed
+  apt:
+    name: libpq-dev
+    state: present
+    update_cache: yes
+    cache_valid_time: "{{apt_cache_valid_time | default (3600)}}"
+  notify:
+    - restart postgresql

data/vendor/ANXS.postgresql/tasks/extensions/postgis.yml

@@ -0,0 +1,14 @@
+# file: postgresql/tasks/extensions/postgis.yml
+
+- name: PostgreSQL | Extensions | Make sure the postgis extensions are installed
+  apt:
+    name: "{{item}}"
+    state: present
+    update_cache: yes
+    cache_valid_time: "{{apt_cache_valid_time | default (3600)}}"
+  with_items:
+    - libgeos-c1
+    - "postgresql-{{postgresql_version}}-postgis-{{postgresql_ext_postgis_version}}"
+    - "postgresql-{{postgresql_version}}-postgis-{{postgresql_ext_postgis_version}}-scripts"
+  notify:
+    - restart postgresql

data/vendor/ANXS.postgresql/tasks/extensions.yml

@@ -0,0 +1,8 @@
+# file: postgresql/tasks/extensions.yml
+
+- include: extensions/contrib.yml
+  when: postgresql_ext_install_contrib
+- include: extensions/dev_headers.yml
+  when: postgresql_ext_install_dev_headers
+- include: extensions/postgis.yml
+  when: postgresql_ext_install_postgis

data/vendor/ANXS.postgresql/tasks/install.yml

@@ -0,0 +1,34 @@
+# file: postgresql/tasks/install.yml
+
+- name: PostgreSQL | Add PostgreSQL repository apt-key
+  apt_key:
+    id: "{{ postgresql_apt_key_id }}"
+    url: "{{ postgresql_apt_key_url }}"
+    state: present
+  when: postgresql_apt_key_url and postgresql_apt_key_id
+
+- name: PostgreSQL | Add PostgreSQL repository
+  apt_repository:
+    repo: "{{ postgresql_apt_repository }}"
+    state: present
+  when: postgresql_apt_repository
+
+- name: PostgreSQL | Make sure the dependencies are installed
+  apt:
+    pkg: "{{item}}"
+    state: present
+    update_cache: yes
+    cache_valid_time: "{{apt_cache_valid_time | default (3600)}}"
+  with_items: ["python-psycopg2", "python-pycurl", "locales"]
+
+- name: PostgreSQL | Install PostgreSQL
+  apt:
+    name: "{{item}}"
+    state: present
+    update_cache: yes
+    cache_valid_time: "{{apt_cache_valid_time | default (3600)}}"
+  environment: postgresql_env
+  with_items:
+    - "postgresql-{{postgresql_version}}"
+    - "postgresql-client-{{postgresql_version}}"
+    - "postgresql-contrib-{{postgresql_version}}"

data/vendor/ANXS.postgresql/tasks/main.yml

@@ -0,0 +1,23 @@
+# file: postgresql/tasks/main.yml
+
+- include: install.yml
+  tags: [postgresql, postgresql-install]
+
+- include: extensions.yml
+  tags: [postgresql, postgresql-extensions]
+
+- include: configure.yml
+  tags: [postgresql, postgresql-configure]
+
+- include: users.yml
+  tags: [postgresql, postgresql-users]
+
+- include: databases.yml
+  tags: [postgresql, postgresql-databases]
+
+- include: users_privileges.yml
+  tags: [postgresql, postgresql-users]
+
+- include: monit.yml
+  when: monit_protection is defined and monit_protection == true
+  tags: [postgresql, postgresql-monit]

data/vendor/ANXS.postgresql/tasks/monit.yml

@@ -0,0 +1,6 @@
+# file: postgresql/tasks/monit.yml
+
+- name: PostgreSQL | (Monit) Copy the postgresql monit service file
+  template:
+    src: etc_monit_conf.d_postgresql.j2
+    dest: /etc/monit/conf.d/postgresql

data/vendor/ANXS.postgresql/tasks/users.yml

@@ -0,0 +1,18 @@
+# file: postgresql/tasks/users.yml
+
+- name: PostgreSQL | Ensure PostgreSQL is running
+  service:
+    name: postgresql
+    state: started
+
+- name: PostgreSQL | Make sure the PostgreSQL users are present
+  postgresql_user:
+    name: "{{item.name}}"
+    password: "{{item.pass | default('pass')}}"
+    port: "{{postgresql_port}}"
+    state: present
+    login_user: "{{postgresql_admin_user}}"
+  sudo: yes
+  sudo_user: "{{postgresql_admin_user}}"
+  with_items: postgresql_users
+  when: postgresql_users|length > 0

data/vendor/ANXS.postgresql/tasks/users_privileges.yml

@@ -0,0 +1,16 @@
+# file: postgresql/tasks/users_privileges.yml
+
+- name: PostgreSQL | Update the user privileges
+  postgresql_user:
+    name: "{{item.name}}"
+    db: "{{item.db}}"
+    port: "{{postgresql_port}}"
+    priv: "{{item.priv | default('ALL')}}"
+    state: present
+    login_host: "{{item.host | default('localhost')}}"
+    login_user: "{{postgresql_admin_user}}"
+    role_attr_flags: "{{item.role_attr_flags | default('')}}"
+  sudo: yes
+  sudo_user: "{{postgresql_admin_user}}"
+  with_items: postgresql_user_privileges
+  when: postgresql_users|length > 0

data/vendor/ANXS.postgresql/templates/etc_monit_conf.d_postgresql.j2

@@ -0,0 +1,6 @@
+check process postgresql with pidfile /var/run/postgresql/{{postgresql_version}}-{{postgresql_cluster_name}}.pid
+  group database
+  start program = "/etc/init.d/postgresql start"
+  stop program = "/etc/init.d/postgresql stop"
+  if failed host localhost port 5432 protocol pgsql then restart
+  if 5 restarts within 5 cycles then timeout

data/vendor/ANXS.postgresql/templates/pg_hba.conf.j2

@@ -0,0 +1,39 @@
+# PostgreSQL Client Authentication Configuration File
+# ===================================================
+#
+# Refer to the "Client Authentication" section in the PostgreSQL
+# documentation for a complete description of this file.  A short
+# synopsis follows.
+#
+# This file controls: which hosts are allowed to connect, how clients
+# are authenticated, which PostgreSQL user names they can use, which
+# databases they can access.  Records take one of these forms:
+#
+# local      DATABASE  USER  METHOD  [OPTIONS]
+# host       DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostssl    DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+# hostnossl  DATABASE  USER  ADDRESS  METHOD  [OPTIONS]
+#
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+
+# Default:
+{% for connection in postgresql_pg_hba_default %}
+# {{connection.comment}}
+{{connection.type}}  {{connection.database}}  {{connection.user}}  {{connection.address}}  {{connection.method}}
+{% endfor %}
+
+# Password hosts
+{% for host in postgresql_pg_hba_passwd_hosts %}
+host  all  all  {{host}}  password
+{% endfor %}
+
+# Trusted hosts
+{% for host in postgresql_pg_hba_trust_hosts %}
+host  all  all  {{host}}  trust
+{% endfor %}
+
+# User custom
+{% for connection in postgresql_pg_hba_custom %}
+# {{connection.comment}}
+{{connection.type}}  {{connection.database}}  {{connection.user}}  {{connection.address}}  {{connection.method}}
+{% endfor %}