From 4b4f1b99d8c3dd58bc0b6397a5da422ac163acf9 Mon Sep 17 00:00:00 2001
From: Aurélien Bompard <aurelien@bompard.org>
Date: Sep 17 2021 08:26:00 +0000
Subject: datanommer: create the database and users


Signed-off-by: Aurélien Bompard <aurelien@bompard.org>

---

diff --git a/roles/postgresql_server/tasks/datanommer.yml b/roles/postgresql_server/tasks/datanommer.yml
index 74fb00d..f403b2a 100644
--- a/roles/postgresql_server/tasks/datanommer.yml
+++ b/roles/postgresql_server/tasks/datanommer.yml
@@ -12,6 +12,7 @@
       repo_gpgcheck=0
       enabled = 1
   tags:
+  - datanommer
   - postgresql
   - timescaledb
   when: ansible_distribution_major_version|int >= 8 and ansible_distribution == 'RedHat'
@@ -26,6 +27,7 @@
       profiles=
       state=enabled
   tags:
+  - datanommer
   - postgresql
   - timescaledb
   when: ansible_distribution_major_version|int >= 8 and ansible_distribution == 'RedHat'
@@ -36,6 +38,7 @@
       - timescaledb
     state: present
   tags:
+  - datanommer
   - postgresql
   - timescaledb
 
@@ -47,5 +50,43 @@
   notify:
   - restart postgresql
   tags:
+  - datanommer
   - postgresql
   - timescaledb
+
+
+# Database users
+#
+- name: create the main DB user
+  become_user: postgres
+  become: true
+  postgresql_user:
+     name: "{{ datanommerDBUser }}"
+     password: "{{ (env == 'production')|ternary(datanommerDBPassword, datanommer_stg_db_password) }}"
+  tags:
+  - datanommer
+  - postgresql
+
+- name: create the RO DB user
+  become_user: postgres
+  become: true
+  postgresql_user:
+     name: datanommer_ro
+     password: "{{ datanommer_ro_password }}"
+  tags:
+  - datanommer
+  - postgresql
+
+
+# Databases
+#
+- name: create the datanommer database
+  become_user: postgres
+  become: true
+  postgresql_db:
+     name: datanommer2
+     owner: "{{ datanommerDBUser }}"
+     encoding: UTF-8
+  tags:
+  - datanommer
+  - postgresql