deploy the psql ca

Author: evgeni

development/playbooks/remote-database/remote-database.yaml

@@ -15,3 +15,27 @@
           - "{{ ansible_facts['fqdn'] }}"
         certificates_ca_password: "CHANGEME"
     - role: postgresql
+
+  tasks:
+    - name: Fetch PostgreSQL SSL CA
+      ansible.builtin.fetch:
+        src: "{{ certificates_ca_directory }}/certs/ca.crt"
+        dest: "{{ obsah_state }}/db-ca.crt"
+        flat: true
+      when:
+        - database_ssl | default(false)
+
+- name: Deploy PostgreSQL SSL CA
+  hosts:
+    - quadlet
+  become: true
+  tasks:
+    - name: Deploy PostgreSQL SSL CA
+      ansible.builtin.copy:
+        src: "{{ obsah_state }}/db-ca.crt"
+        dest: /root/db-ca.crt
+        mode: "0640"
+        owner: root
+        group: root
+      when:
+        - database_ssl | default(false)