- name: Install PostgreSQL
  apt:
    name:
      - postgresql-{{ pg_version }}
      - postgresql-contrib
    update_cache: yes

- name: Stop postgres before config
  service:
    name: postgresql
    state: stopped

- name: postgresql.conf
  template:
    src: postgresql.conf.j2
    dest: /etc/postgresql/{{ pg_version }}/main/postgresql.conf

- name: pg_hba.conf
  template:
    src: pg_hba.conf.j2
    dest: /etc/postgresql/{{ pg_version }}/main/pg_hba.conf

- name: TLS cert dir
  file:
    path: /etc/postgresql/ssl
    state: directory
    owner: postgres
    mode: "700"

- name: Copy TLS cert
  copy:
    src: pg.crt
    dest: /etc/postgresql/ssl/pg.crt
    owner: postgres
    mode: "600"

- name: Copy TLS key
  copy:
    src: pg.key
    dest: /etc/postgresql/ssl/pg.key
    owner: postgres
    mode: "600"

- name: Start postgres
  service:
    name: postgresql
    state: started