Postgres separate
-
Installing postgres 11 on a separate VM (.120) -
Using roles anxs.postgresql instead of geerlingguy.postgresql because geerlingguy.postgresql installs version 9.2 (EOL), and does not have a template for the postgresql.conf file. -
Changed order in ci to install in order: database, galaxy, and nginx -
Had to change the name of the group to replace hyphen by underscore as I was getting an error when using groups.galaxy-db. -
Changed playbook_galaxy.yml to connect to the remote database -
using vault to encrypt the galaxy-admin user for preprod and prod
Security: Currenty the hba config is as follows:
local all all peer
host all all 127.0.0.1/32 md5
host all all ::1/128 md5
local all postgres peer map=root_as_postgres
host all all 192.168.105.118/32 md5
Edited by Julien Seiler