Merge pull request #1 from grim-fendango/make-exposure-to-host-configurable

Access to the database from the host is now configurable via the role…

Author: grim-fendango

defaults/main.yml

@@ -11,6 +11,7 @@ postgresql:
   ssl: true
   timezone: "UTC"
   version: 9.5
+  expose_to_host: false
 
   service:
     state: started

templates/pg_hba.conf.j2

@@ -6,4 +6,4 @@ local   all             postgres                                trust
 local   all             all                                     peer
 host    all             all             127.0.0.1/32            md5
 host    all             all             ::1/128                 md5
-{% if group_env == 'local' %}host    all             all             0.0.0.0/0               trust{% endif %}
+{% if postgresql.expose_to_host == true %}host    all             all             all               trust{% endif %}

templates/postgresql.conf.j2

@@ -7,7 +7,7 @@ ident_file = '/etc/postgresql/{{ postgresql.version }}/main/pg_ident.conf'
 
 external_pid_file = '/var/run/postgresql/{{ postgresql.version }}-main.pid'
 
-{% if group_env == 'local' %}
+{% if postgresql.expose_to_host == true %}
 listen_addresses = '*'
 {% endif %}