remote-database.yaml

---
- name: Setup rootless user environment
  hosts:
    - database
  become: true
  roles:
    - role: rootless_user
  tasks:
    - name: Map rootless_user_xdg_runtime_dir to foremanctl namespace
      ansible.builtin.set_fact:
        foremanctl_xdg_runtime_dir: "{{ rootless_user_xdg_runtime_dir }}"

- name: Setup remote database
  hosts:
    - database
  become: true
  vars_files:
    - "../../../src/vars/database.yml"
    - "../../../src/vars/base.yaml"
  vars:
    certificates_hostnames:
      - "{{ ansible_facts['fqdn'] }}"
    certificates_ca_password: "CHANGEME"
    postgresql_ssl_crt: "{{ certificates_ca_directory }}/certs/{{ ansible_facts['fqdn'] }}.crt"
    postgresql_ssl_key: "{{ certificates_ca_directory }}/private/{{ ansible_facts['fqdn'] }}.key"
  roles:
    - role: pre_install
    - role: certificates
    - role: postgresql

  tasks:
    - name: Fetch PostgreSQL SSL CA
      ansible.builtin.fetch:
        src: "{{ certificates_ca_directory }}/certs/ca.crt"
        dest: "{{ obsah_state_path }}/db-ca.crt"
        flat: true