{{ ansible_managed | comment }}
#
# Environment of the postgres_exporter systemd unit. The DSN lives here and not
# in the unit file because it can carry the database password.
{% if psql_prometheus_exporter_use_socket %}
# Unix socket: peer authentication, no password. lib/pq refuses any sslmode
# other than 'disable' on a unix socket, and the traffic never leaves the host.
DATA_SOURCE_NAME="user={{ psql_prometheus_exporter_db_user }} host={{ psql_prometheus_exporter_db_socket_dir }} port={{ psql_prometheus_exporter_db_port }} dbname={{ psql_prometheus_exporter_db_name }} sslmode=disable"
{% else %}
DATA_SOURCE_NAME="user={{ psql_prometheus_exporter_db_user }} password={{ psql_prometheus_exporter_db_pwd }} host={{ psql_prometheus_exporter_db_host }} port={{ psql_prometheus_exporter_db_port }} dbname={{ psql_prometheus_exporter_db_name }} sslmode={{ psql_prometheus_exporter_db_sslmode }}"
{% endif %}