---
- name: packages
  apt:
    name: "{{ item }}"
    install_recommends: no
  with_items:
    - python-psycopg2
    - python3-psycopg2
- become: yes
  become_user: postgres
  vars:
    ansible_ssh_pipelining: true
  block:
    - name: create-user rosin-prod
      tags: update-password
      postgresql_user:
        name: rosin-prod
        password: "{{ rosin_secret.db_password_rosin_prod }}"
        encrypted: yes
    - name: createdb rosin-prod
      postgresql_db:
        name: "rosin-prod"
        encoding: "utf-8"
        owner: "rosin-prod"
    - name: enable uuid extension
      postgresql_ext:
        name: uuid-ossp
        db: rosin-prod
    - name: grant permissions
      postgresql_privs:
        database: rosin-prod
        state: present
        privs: USAGE
        type: schema
        objs: public
        roles: rosin-prod