---
postgresql_version: 16
postgresql_port: 5432
postgresql_data_dir: /srv/data/postgres

# Écoute sur localhost + LAN cluster (pour les services k8s futurs)
postgresql_listen_addresses: "localhost, 192.168.10.1"

postgresql_max_connections: 100
postgresql_shared_buffers: "256MB"

# Bases et utilisateurs à créer
# Mots de passe dans le vault : vault_pg_hermes_password, vault_pg_litellm_password,
#                               vault_pg_openwebui_password, vault_pg_n8n_password,
#                               vault_pg_ghostfolio_password, vault_pg_authentik_password,
#                               vault_pg_guacamole_password, vault_pg_forgejo_password
postgresql_databases:
  - name: hermes
  - name: litellm
  - name: openwebui
  - name: n8n
  - name: ghostfolio
  - name: authentik
  - name: guacamole
  - name: forgejo

postgresql_users:
  - name: hermes
    password: "{{ vault_pg_hermes_password }}"
    db: hermes
  - name: litellm
    password: "{{ vault_pg_litellm_password }}"
    db: litellm
  - name: openwebui
    password: "{{ vault_pg_openwebui_password }}"
    db: openwebui
  - name: n8n
    password: "{{ vault_pg_n8n_password }}"
    db: n8n
  - name: ghostfolio
    password: "{{ vault_pg_ghostfolio_password }}"
    db: ghostfolio
  - name: authentik
    password: "{{ vault_pg_authentik_password }}"
    db: authentik
  - name: guacamole
    password: "{{ vault_pg_guacamole_password }}"
    db: guacamole
  - name: forgejo
    password: "{{ vault_pg_forgejo_password }}"
    db: forgejo