ISTI-ansible-roles
/
ansible-role-postgresql
5
0
Fork 1
Code Issues Pull Requests Releases Wiki Activity

Fix the CA certificates path on EL based distributions.

This commit is contained in:
Andrea Dell'Amico 2026-04-08 19:24:39 +02:00
parent 923d47cd68
commit 0020074eaa
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
defaults/main.yml
View File

@ -128,8 +128,7 @@ postgresql_letsencrypt_managed: '{% if letsencrypt_acme_install is defined and l
psql_ssl_privkey_global_file: '{% if postgresql_letsencrypt_managed %}{{ letsencrypt_acme_sh_certificates_install_path }}/privkey{% else %}{{ pki_dir }}/keys/{{ ansible_fqdn}}-key.pem{% endif %}'
psql_ssl_privkey_file: /etc/pki/postgresql/postgresql.key
psql_ssl_cert_file: '{% if postgresql_letsencrypt_managed %}{{ letsencrypt_acme_sh_certificates_install_path }}/fullchain{% else %}{{ pki_dir }}/certs/{{ ansible_fqdn}}.pem{% endif %}'
# In CentOS/RHEL is /etc/pki/tls/cert.pem
psql_ssl_ca_file: '/etc/ssl/certs/ca-certificates.crt'
psql_ssl_ca_file: '{% if ansible_distribution_file_variety == "Debian" %}/etc/ssl/certs/ca-certificates.crt{% elif {% if ansible_distribution_file_variety == "RedHat" %}/etc/pki/tls/cert.pem{% endif %}'
psql_conf_ssl_parameters:
- { name: 'ssl', value: 'true', set: 'true' }
- { name: 'ssl_cert_file', value: '{{ psql_ssl_cert_file }}', set: 'true' }