From 6fe44ad6366232314d45502d387ccbc671e84d9f Mon Sep 17 00:00:00 2001
From: Trygve Laugstøl <trygvis@inamo.no>
Date: Sat, 24 Nov 2018 22:28:42 +0100
Subject: o Mediawiki.

---
 ansible/roles/mediawiki-database/tasks/main.yml | 37 +++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 ansible/roles/mediawiki-database/tasks/main.yml

(limited to 'ansible/roles/mediawiki-database')

diff --git a/ansible/roles/mediawiki-database/tasks/main.yml b/ansible/roles/mediawiki-database/tasks/main.yml
new file mode 100644
index 0000000..8680830
--- /dev/null
+++ b/ansible/roles/mediawiki-database/tasks/main.yml
@@ -0,0 +1,37 @@
+- tags:
+    - mediawiki-database
+    - packages
+  become: yes
+  block:
+    - name: packages
+      become:
+      with_items:
+        - python-psycopg2 # required for the next block
+      apt:
+        name: "{{ item }}"
+        install_recommends: no
+
+- tags: mediawiki-database
+  become: yes
+  become_user: postgres
+  vars:
+    ansible_ssh_pipelining: true
+  block:
+    - name: pg user mediawiki
+      tags: update-password
+      postgresql_user:
+        name: "{{ credentials.username }}"
+        password: "{{ credentials.password }}"
+        encrypted: yes
+    - name: pg db mediawiki
+      postgresql_db:
+        name: "{{ credentials.database }}"
+        encoding: utf-8
+        owner: "{{ credentials.username }}"
+    - postgresql_privs:
+        database: "{{ credentials.database }}"
+        state: present
+        privs: USAGE
+        type: schema
+        objs: public
+        roles: "{{ credentials.username }}"
-- 
cgit v1.2.3