configure_repmgr.yml

- name: Repmgr | Update configuration (repmgr.conf)
  template:
    src: "repmgr.conf-{{ repmgr_version[:3] }}.j2"
    dest: "{{repmgr_config_directory}}/repmgr.conf"
    owner: "{{ postgresql_service_user }}"
    group: "{{ postgresql_service_group }}"
    mode: 0640
  notify: restart repmgr

- name: Repmgr | Ensure systemd drop-in directory exists
  file:
    path: "/etc/systemd/system/repmgr{{postgresql_version}}.service.d/"
    state: directory
    mode: 0755

- name: Repmgr | Update drop-in
  template:
    src: "repmgr.custom.conf.j2"
    dest: "/etc/systemd/system/repmgr{{postgresql_version}}.service.d/custom.conf"

- name: Repmgr | Allow passwordless restarts with postgres user
  template:
    src: "sudoers.postgresql.j2"
    dest: "/etc/sudoers.d/postgresql"
    mode: 0640

- name: Repmgr | Update .pgpass for postgres user
  template:
    src: "pgpass.j2"
    dest: "{{repmgr_passfile}}"
    owner: "{{ postgresql_service_user }}"
    group: "{{ postgresql_service_group }}"
    mode: 0400
    trim_blocks: no
  no_log: true

- name: Repmgr | Generate ssh keypair for postgres user
  command: "ssh-keygen -b {{repmgr_ssh_key_bits}} -t {{repmgr_ssh_key_type}} -f {{repmgr_private_key_path}} -N ''"
  args:
    creates: "{{repmgr_private_key_path}}"
  become: yes
  become_user: "{{ postgresql_service_user }}"
  when: repmgr_primary

- name: Repmgr | Slurp ssh public key
  slurp:
    src: "{{repmgr_public_key_path}}"
  register: ssh_public_key
  when: repmgr_primary

- name: Repmgr | Slurp ssh private key
  slurp:
    src: "{{repmgr_private_key_path}}"
  register: ssh_private_key
  when: repmgr_primary

- name: Repmgr | Update authorized_keys for postgres user
  authorized_key:
    user: postgres
    state: present
    key: "{% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ vars['ssh_public_key']['content'] | b64decode }}{% endfor %}"

- name: Repmgr | Update public ssh key for postgres user
  copy:
    content: "{% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ vars['ssh_public_key']['content'] | b64decode }}{% endfor %}"
    dest: "{{repmgr_public_key_path}}"
    owner: "{{ postgresql_service_user }}"
    group: "{{ postgresql_service_group }}"
    mode: 0644

- name: Repmgr | Update private ssh key for postgres user
  copy:
    content: "{% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ vars['ssh_private_key']['content'] | b64decode }}{% endfor %}"
    dest: "{{repmgr_private_key_path}}"
    owner: "{{ postgresql_service_user }}"
    group: "{{ postgresql_service_group }}"
    mode: 0600

- name: Repmgr | Check cluster status
  command: "{{postgresql_bin_directory}}/repmgr -f {{repmgr_config_directory}}/repmgr.conf cluster show"
  become: yes
  become_user: "{{ postgresql_service_user }}"
  changed_when: repmgr_cluster_show.rc != 0
  register: repmgr_cluster_show
  ignore_errors: True

- name: Repmgr | Register as primary
  command: "{{postgresql_bin_directory}}/repmgr -f {{repmgr_config_directory}}/repmgr.conf primary register"
  become: yes
  become_user: "{{ postgresql_service_user }}"
  when: repmgr_primary and not ansible_hostname in repmgr_cluster_show.stdout and not "primary" in repmgr_cluster_show.stdout

- name: Repmgr | Ensure postgresql slave is stopped before clone
  service:
    name: "postgresql-{{postgresql_version}}"
    state: stopped
  when: not repmgr_primary and not ansible_hostname in repmgr_cluster_show.stdout and not "standby" in repmgr_cluster_show.stdout

- name: Repmgr | Clone standby
  command: "{{postgresql_bin_directory}}/repmgr -F -h {% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ host }}{% endfor %} -p {{ postgresql_port }} -U repmgr -d repmgr -f {{repmgr_config_directory}}/repmgr.conf standby clone"
  become: yes
  become_user: "{{ postgresql_service_user }}"
  when: not repmgr_primary and not ansible_hostname in  repmgr_cluster_show.stdout and not "standby" in repmgr_cluster_show.stdout

- name: Repmgr | Ensure postgresql slave is running after clone
  service:
    name: "postgresql-{{postgresql_version}}"
    state: started
  when: not repmgr_primary

- name: Repmgr | Wait for Postgres
  wait_for:
    timeout: 2
  delegate_to: localhost
  become: false

- name: Repmgr | Register standby
  command: "{{postgresql_bin_directory}}/repmgr -F -h {% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ host }}{% endfor %} -U repmgr -d repmgr -f {{repmgr_config_directory}}/repmgr.conf standby register"
  become: yes
  become_user: "{{ postgresql_service_user }}"
  when: not repmgr_primary and not ansible_hostname in repmgr_cluster_show.stdout and not "standby" in repmgr_cluster_show.stdout

- name: Repmgr | Verify cluster functionality
  command: "{{postgresql_bin_directory}}/repmgr -F -h {% for host, vars in hostvars.items() if 'repmgr_primary' in vars and vars['repmgr_primary'] == True %}{{ host }}{% endfor %} -U repmgr -d repmgr -f {{repmgr_config_directory}}/repmgr.conf cluster crosscheck"
  become: yes
  become_user: "{{ postgresql_service_user }}"

- name: Repmgr | Ensure repmgrd is running
  service:
    name: "repmgr{{postgresql_version}}"
    state: started
    enabled: yes
  when: repmgr_monitoring_history == "true" or repmgr_failover == "automatic"

- name: Repmgr | Ensure crontab is installed
  package:
    name: crontabs
  when: repmgr_monitoring_history == "true" or repmgr_failover == "automatic"

- name: Repmgr | Ensure crond is running
  service:
    name: "crond"
    state: started
    enabled: yes

- name: Repmgr | Setup cluster monitoring history cleanup
  copy:
    content: "{{postgresql_bin_directory}}/repmgr -f {{repmgr_config_directory}}/repmgr.conf cluster cleanup --keep-history={{repmgr_keep_history_days}}"
    dest: "/etc/cron.daily/repmgr_cleanup"
    mode: 0755
  when: repmgr_monitoring_history == "true" or repmgr_failover == "automatic"