Skip to content

Conversation

davidassigbi
Copy link
Contributor

Description

This update enables SSL by default within the Ansible role, including automatic generation of self-signed certificates. Additionally, it changes the default value of the postgresql_config_change_allow_restart variable to false, preventing automatic restarts on configuration changes by default.

closes #6

Motivation and Context

These changes improve the default security posture of PostgreSQL by enabling SSL out of the box. They also help avoid unnecessary restarts during configuration updates unless explicitly allowed, aligning better with production deployment expectations.

How Has This Been Tested?

Tests performed with Molecule both locally and using Github Actions

Screenshots (if appropriate):

Types of Changes

  • Breaking change: feat(ssl): Enable SSL by default with support for generating self signed certificates
  • Breaking change: feat(config): Change default value of postgresql_config_change_allow_restart to false
  • chore(ci): Switch ansible lint action to ansible/ansible-lint@main

Checklist:

  • My code follows the code style of this project.
  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.

@davidassigbi davidassigbi added this to the 3.0.0 milestone Jul 11, 2025
@davidassigbi davidassigbi merged commit 4693f16 into main Jul 11, 2025
60 checks passed
@davidassigbi davidassigbi deleted the ssl_by_default_2 branch July 11, 2025 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add support for generating a self signed certificate for the postgresql user.
3 participants