Encrypt and change passwords

Author: banjocat

ansible/inventory/group_vars/all.yml

@@ -0,0 +1,2 @@
+postgres_user: walter
+postgres_db: walter

ansible/inventory/group_vars/data.yml

@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+34656137313237356565623438363465643366346231633864323734343864393763643737343261
+3461353363376130343230343233363166396265343130320a346337303334653663313132373637
+30343934303234303964656339636536393866303666353638366137333666613062313764613039
+3061626131356663630a623835393632323531663334656262343631383636313438323533633838
+32616438383231366130363964326538323236333233313063363433383036326466363563393432
+3139393163643233623138396664323266396337353365343533

ansible/roles/postgres/tasks/main.yml

@@ -1,6 +1,6 @@
 # https://container-solutions.com/running-docker-containers-with-systemd/
 - name: Add systemd file
-  copy:
+  template:
     src: postgres.service
     dest: /etc/systemd/system/postgres.service
   notify:

…le/roles/postgres/files/postgres.service …oles/postgres/templates/postgres.serviceansible/roles/postgres/files/postgres.service renamed to ansible/roles/postgres/templates/postgres.service ansible/roles/postgres/files/postgres.service renamed to ansible/roles/postgres/templates/postgres.service

@@ -9,7 +9,7 @@ Restart=always
 ExecStartPre=-/usr/bin/docker stop %n
 ExecStartPre=-/usr/bin/docker rm %n
 ExecStartPre=/usr/bin/docker pull postgres:11
-ExecStart=/usr/bin/docker run --rm -v "/var/lib/postgres:/var/lib/postgresql/data" -e "POSTGRES_USER=walter" -e "POSTGRES_DB=walter" -e "POSTGRES_PASSWORD=wesley" --name postgres --net=host postgres:11
+ExecStart=/usr/bin/docker run --rm -v "/var/lib/postgres:/var/lib/postgresql/data" -e "POSTGRES_USER={{ postgres_user }}" -e "POSTGRES_DB={{ postgres_password }}" -e "POSTGRES_PASSWORD={{ postgres_password }}" --name postgres --net=host postgres:11
 
 
 [Install]