Enable SSL by default #27
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
This update enables SSL by default within the Ansible role, including automatic generation of self-signed certificates. Additionally, it changes the default value of the
postgresql_config_change_allow_restart
variable to false, preventing automatic restarts on configuration changes by default.closes #6
Motivation and Context
These changes improve the default security posture of PostgreSQL by enabling SSL out of the box. They also help avoid unnecessary restarts during configuration updates unless explicitly allowed, aligning better with production deployment expectations.
How Has This Been Tested?
Tests performed with Molecule both locally and using Github Actions
Screenshots (if appropriate):
Types of Changes
postgresql_config_change_allow_restart
tofalse
ansible/ansible-lint@main
Checklist: