Add simplified PostgreSQL infrastructure role for database services

- Provides PostgreSQL server as shared database infrastructure
- Follows KISS principle with only essential configuration (11 variables vs 45 originally)
- Implements maximum security with Unix socket-only superuser access
- Uses scram-sha-256 authentication for application users
- Includes SystemD security hardening
- Applications manage their own databases/users via this infrastructure
- Production-ready with data checksums and localhost-only access
This commit is contained in:
2025-11-18 21:33:50 +01:00
parent 7c3b02e5ad
commit 762d00eebf
9 changed files with 532 additions and 0 deletions

View File

@@ -10,8 +10,13 @@
gather_facts: yes
roles:
# Infrastructure services
- role: postgresql
tags: ['postgresql', 'infrastructure', 'database']
# - role: caddy
# tags: ['caddy', 'infrastructure', 'web']
# Application services
- role: sigvild-gallery
tags: ['sigvild', 'gallery', 'wedding']