141 lines
No EOL
3.8 KiB
YAML
141 lines
No EOL
3.8 KiB
YAML
- name: Include secrets.yml
|
|
ansible.builtin.include_vars:
|
|
file: secrets.yml
|
|
|
|
- name: Create /etc/apt/keyrings directory
|
|
ansible.builtin.file:
|
|
path: /etc/apt/keyrings
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
#- name: Create /usr/share/postgresql-common/pgdg directory
|
|
# ansible.builtin.file:
|
|
# path: /usr/share/postgresql-common/pgdg
|
|
# state: directory
|
|
# mode: '0755'
|
|
|
|
- name: Download PostgreSQL Repo Signing Key
|
|
ansible.builtin.get_url:
|
|
url: https://www.postgresql.org/media/keys/ACCC4CF8.asc
|
|
dest: /etc/apt/keyrings/apt.postgresql.org.asc
|
|
mode: '0644'
|
|
|
|
- name: Add PostgreSQL Repository
|
|
ansible.builtin.apt_repository:
|
|
repo: deb [signed-by=/etc/apt/keyrings/apt.postgresql.org.asc] https://apt.postgresql.org/pub/repos/apt bookworm-pgdg main
|
|
state: present
|
|
|
|
- name: Install PostgreSQL
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- postgresql-16
|
|
#- sqlite3
|
|
# state: latest
|
|
update_cache: yes
|
|
register: deb_postgresql_install
|
|
|
|
- name: Configure PostgreSQL pg_hba.conf
|
|
ansible.builtin.template:
|
|
src: pg_hba.conf
|
|
dest: /etc/postgresql/16/main/pg_hba.conf
|
|
owner: postgres
|
|
group: postgres
|
|
mode: '0640'
|
|
register: conf_postgresql_pg_hba
|
|
|
|
- name: Create PostgreSQL Database
|
|
shell: psql -c "CREATE ROLE {{ pdns_pgsql_user }} WITH LOGIN PASSWORD '{{ pdns_pgsql_password }}';" -c "CREATE DATABASE {{ pdns_pgsql_database }} WITH OWNER = {{ pdns_pgsql_user }} encoding = 'UTF8';"
|
|
become: true
|
|
become_user: postgres
|
|
when: deb_postgresql_install.changed
|
|
|
|
- name: Download PowerDNS PostgreSQL Schema
|
|
ansible.builtin.get_url:
|
|
url: https://raw.githubusercontent.com/PowerDNS/pdns/master/modules/gpgsqlbackend/schema.pgsql.sql
|
|
dest: /var/lib/postgresql/powerdns_schema.sql
|
|
owner: postgres
|
|
group: postgres
|
|
mode: '0600'
|
|
|
|
- name: Apply PowerDNS PostgreSQL Schema
|
|
shell: "psql < /var/lib/postgresql/powerdns_schema.sql"
|
|
become: true
|
|
become_user: postgres
|
|
environment:
|
|
PGHOSTADDR: 127.0.0.1
|
|
PGDATABASE: "{{ pdns_pgsql_database }}"
|
|
PGUSER: "{{ pdns_pgsql_user }}"
|
|
PGPASSWORD: "{{ pdns_pgsql_password }}"
|
|
when: deb_postgresql_install.changed
|
|
|
|
- name: Enable PostgreSQL
|
|
ansible.builtin.service:
|
|
name: postgresql
|
|
enabled: true
|
|
|
|
- name: Restart PostgreSQL
|
|
ansible.builtin.service:
|
|
name: postgresql@16-main
|
|
state: restarted
|
|
when: conf_postgresql_pg_hba.changed
|
|
|
|
- name: Download PowerDNS Repo Signing Key
|
|
ansible.builtin.get_url:
|
|
url: https://repo.powerdns.com/FD380FBB-pub.asc
|
|
dest: /etc/apt/keyrings/auth-48-pub.asc
|
|
mode: '0644'
|
|
|
|
- name: Add PowerDNS Repository
|
|
ansible.builtin.apt_repository:
|
|
repo: deb [signed-by=/etc/apt/keyrings/auth-48-pub.asc arch=amd64] http://repo.powerdns.com/debian bookworm-auth-48 main
|
|
state: present
|
|
|
|
- name: Install PowerDNS and prerequisites
|
|
ansible.builtin.apt:
|
|
pkg:
|
|
- pdns-server
|
|
- pdns-backend-pgsql
|
|
#- sqlite3
|
|
# state: latest
|
|
update_cache: yes
|
|
register: deb_powerdns_install
|
|
|
|
- name: Print groups
|
|
ansible.builtin.debug:
|
|
var: groups['autosecondaries']
|
|
verbosity: 2
|
|
|
|
- name: Print hostvars
|
|
ansible.builtin.debug:
|
|
var: hostvars
|
|
verbosity: 2
|
|
|
|
- name: Print return information from the previous task
|
|
ansible.builtin.debug:
|
|
var: axfr_list
|
|
verbosity: 2
|
|
|
|
- name: Set AXFR List as fact
|
|
set_fact:
|
|
axfr_ipv6: "{{ groups['autosecondaries']|default([])|map('extract', hostvars)|map(attribute='ipv6')|list|sort }}"
|
|
|
|
|
|
- name: Configure PowerDNS
|
|
ansible.builtin.template:
|
|
src: pdns.conf.j2
|
|
dest: /etc/powerdns/pdns.conf
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
register: pdns_config
|
|
|
|
- name: Enable PowerDNS
|
|
ansible.builtin.service:
|
|
name: pdns
|
|
enabled: true
|
|
|
|
- name: Restart PowerDNS
|
|
ansible.builtin.service:
|
|
name: pdns
|
|
state: restarted
|
|
when: pdns_config.changed |