Skip to content

Commit 2e8c638

Browse files
committed
Feat: Add postgres-10
Signed-off-by: Mahdi Fooladgar (professormahi) <professormahi_f@yahoo.com>
1 parent 1a33ca4 commit 2e8c638

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

roles/postgres_hardening/tasks/hardening.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,3 +67,31 @@
6767
ansible.builtin.fail:
6868
msg: "Postgres Version is not secure or supported!"
6969
when: not postgres_version or 'RC' in postgres_version_raw or 'DEVEL' in postgres_version_raw or 'BETA' in postgres_version_raw
70+
71+
72+
#################################
73+
# POSTGRES-10 ###################
74+
#################################
75+
- name: Manage permissions on /etc/postgresql/14/main
76+
ansible.builtin.file:
77+
path: /etc/postgresql/14/main
78+
state: directory
79+
owner: postgres
80+
group: postgres
81+
mode: u=rwx,g=,o=
82+
83+
- name: Manage permissions on /etc/postgresql/14/main/postgresql.conf
84+
ansible.builtin.file:
85+
path: /etc/postgresql/14/main/postgresql.conf
86+
state: file
87+
owner: postgres
88+
group: postgres
89+
mode: u=rw,g=r,o=
90+
91+
- name: Manage permissions on /etc/postgresql/14/main/pg_hba.conf
92+
ansible.builtin.file:
93+
path: /etc/postgresql/14/main/pg_hba.conf
94+
state: file
95+
owner: postgres
96+
group: postgres
97+
mode: u=rw,g=,o=

0 commit comments

Comments
 (0)