sr2/ansible-collection-apps
4
0
Fork 0
Code Issues 11 Pull requests Projects Releases Packages Wiki Activity Actions

feat(podman_link): secure postgres access and disable local trust
Some checks failed
Ansible Lint Check / lint (push) Failing after 45s
Details

Browse source
This commit is contained in:
Iain Learmonth 2025-12-04 18:17:38 +00:00
parent e79576cd73
commit c72e513154
4 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/podman_link/templates/home/config/containers/systemd/bridge-postgresql.container
View file

@ -2,6 +2,7 @@
ContainerName=bridge-postgresql
EnvironmentFile=common-bridge.env
Image=registry.gitlab.com/digiresilience/link/link-stack/postgresql:{{ podman_link_stack_version }}
Volume=/home/{{ podman_link_podman_rootless_user }}/pg_hba_bridge.conf:/var/lib/postgresql/data/pg_hba.conf:rw,Z
Volume=/home/{{ podman_link_podman_rootless_user }}/bridge-postgresql-data:/var/lib/postgresql/data:rw,Z
Network=link.network

1
roles/podman_link/templates/home/config/containers/systemd/zammad-postgresql.container
View file

@ -9,6 +9,7 @@ Environment=POSTGRES_DB={{ podman_link_postgres_zammad_database }}
Environment=POSTGRES_HOST_AUTH_METHOD=scram-sha-256
Environment=POSTGRES_INITDB_ARGS=--auth-host=scram-sha-256
Image=registry.gitlab.com/digiresilience/link/link-stack/postgresql:{{ podman_link_stack_version }}
Volume=/home/{{ podman_link_podman_rootless_user }}/pg_hba_zammad.conf:/var/lib/postgresql/data/pg_hba.conf:rw,Z
Volume=/home/{{ podman_link_podman_rootless_user }}/postgresql-data:/var/lib/postgresql/data:rw,Z
Volume=/home/{{ podman_link_podman_rootless_user }}/zammad-data:/opt/zammad:rw,z
Volume=/home/{{ podman_link_podman_rootless_user }}/zammad-backup:/var/tmp/zammad:ro,z

1
roles/podman_link/templates/home/pg_hba.conf Normal file
View file

@ -0,0 +1 @@
host all all all scram-sha-256