service: Better use podman secrets for database passwords
This commit is contained in:
@@ -1,8 +1,4 @@
|
||||
---
|
||||
- name: Include database variables
|
||||
ansible.builtin.include_vars:
|
||||
file: database.yaml
|
||||
|
||||
- name: Database container for {{ service_name }}
|
||||
ansible.builtin.import_role:
|
||||
name: container
|
||||
@@ -22,14 +18,3 @@
|
||||
POSTGRES_PASSWORD_FILE: "/run/secrets/{{ _service_database_name }}"
|
||||
POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
|
||||
container_auto_update: "{{ service_auto_update }}"
|
||||
|
||||
- name: Get database secret info
|
||||
containers.podman.podman_secret_info:
|
||||
name: "{{ _service_database_name }}"
|
||||
showsecret: true
|
||||
register: _service_database_secret
|
||||
|
||||
- name: Set database-related variables
|
||||
ansible.builtin.set_fact:
|
||||
_service_database_password: "{{ _service_database_secret.secrets[0].SecretData }}"
|
||||
_service_container_requires: "{{ _service_container_requires + [_service_database_name + '.service'] }}"
|
||||
|
||||
Reference in New Issue
Block a user