- name: sz-ds
  postgresql_user:
    name: sz-ds
    role_attr_flags: "NOLOGIN"
- name: sz-ds-flyway
  tags: update-password
  postgresql_user:
    name: sz-ds-flyway
    password: "{{ sz_ds_secret.db_password_flyway }}"
    encrypted: yes
- name: sz-ds-web
  tags: update-password
  postgresql_user:
    name: sz-ds-web
    password: "{{ sz_ds_secret.db_password_web }}"
    encrypted: yes
- name: sz-ds db
  postgresql_db:
    name: "sz-ds"
    encoding: "utf-8"
    owner: "sz-ds"
- postgresql_privs:
    database: sz-ds
    state: present
    privs: USAGE
    type: schema
    objs: public
    roles: sz-ds-web,sz-ds-flyway