ansible-base/fenris/default/roles/postgresql-for-synapse/tasks/main.json

[
	{
		"name": "packages",
		"become": true,
		"ansible.builtin.apt": {
			"update_cache": true,
			"pkg": [
				"acl",
				"python3-psycopg2"
			]
		}
	},
	{
		"name": "user",
		"become": true,
		"become_user": "postgres",
		"community.postgresql.postgresql_user": {
			"state": "present",
			"name": "{{var_postgresql_for_synapse_username}}",
			"password": "{{var_postgresql_for_synapse_password}}"
		},
		"environment": {
			"PGOPTIONS": "-c password_encryption=scram-sha-256"
		}
	},
	{
		"name": "schema",
		"become": true,
		"become_user": "postgres",
		"community.postgresql.postgresql_db": {
			"state": "present",
			"template": "template0",
			"name": "{{var_postgresql_for_synapse_schema}}",
			"owner": "{{var_postgresql_for_synapse_username}}",
			"encoding": "UTF-8",
			"lc_collate": "C",
			"lc_ctype": "C"
		}
	},
	{
		"name": "rights",
		"become": true,
		"become_user": "postgres",
		"community.postgresql.postgresql_privs": {
			"state": "present",
			"db": "{{var_postgresql_for_synapse_schema}}",
			"objs": "ALL_IN_SCHEMA",
			"roles": "{{var_postgresql_for_synapse_username}}",
			"privs": "ALL",
			"grant_option": true
		}
	}
]