From bdd36d7188d176815a2b34c7c7612d9c3b7b4e17 Mon Sep 17 00:00:00 2001
From: alkatrazz <alkatrazz@localhost.localdomain>
Date: Fri, 29 May 2026 15:25:42 +0200
Subject: [PATCH] =?UTF-8?q?fix(ansible/postgresql):=20no=5Flog=20sur=20Gra?=
 =?UTF-8?q?nt=20+=20alias=20db=20d=C3=A9pr=C3=A9ci=C3=A9=20=E2=86=92=20dat?=
 =?UTF-8?q?abase?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Grant user privileges : ajout no_log:true (mot de passe visible en clair
  dans les logs Ansible en cas d'échec via item loop)
- Alias 'db' déprécié par community.postgresql → renommé 'database'
- litellm DB recrée manuellement (corruption pg_attribute copiée depuis RAID)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 ansible/roles/postgresql/tasks/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/postgresql/tasks/main.yml b/ansible/roles/postgresql/tasks/main.yml
index 76b2f95..5732b39 100644
--- a/ansible/roles/postgresql/tasks/main.yml
+++ b/ansible/roles/postgresql/tasks/main.yml
@@ -129,7 +129,7 @@
 
 - name: Grant user privileges on their database
   community.postgresql.postgresql_privs:
-    db: "{{ item.db }}"
+    database: "{{ item.db }}"
     privs: ALL
     type: database
     role: "{{ item.name }}"
@@ -137,6 +137,7 @@
   become: true
   become_user: postgres
   loop: "{{ postgresql_users }}"
+  no_log: true
 
 # Firewall géré centralement par le rôle gateway (nftables)
 # Port 5432 ouvert pour cluster_network dans nftables.conf.j2