diff --git a/requirements-dev.txt b/requirements-dev.txt index ea5755aa..c13caebc 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,7 +1,7 @@ -r requirements.txt -ansible-lint==6.20.3 -flake8==3.9.1 +ansible-lint==6.21.1 +flake8==6.1.0 molecule==5.1.0 molecule-docker==2.1.0 -yamllint==1.30.0 +yamllint==1.32.0 diff --git a/requirements.txt b/requirements.txt index b2144a9c..9264d61b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -ansible==7.4.0 +ansible==7.5.0 diff --git a/roles/db/tasks/main.yml b/roles/db/tasks/main.yml index 909c8f30..15554be0 100644 --- a/roles/db/tasks/main.yml +++ b/roles/db/tasks/main.yml @@ -63,6 +63,16 @@ type: database role: "{{ db_user }}" +- name: Grant schema public to the user. + become: true + become_user: postgres + community.postgresql.postgresql_privs: + db: "{{ db_name }}" + privs: ALL + type: schema + objs: public + role: "{{ db_user }}" + - name: Ensure user does not have unnecessary privileges become: true become_user: postgres diff --git a/roles/rabbitmq/tasks/setup_users.yml b/roles/rabbitmq/tasks/setup_users.yml index 6cf09741..ec3de886 100644 --- a/roles/rabbitmq/tasks/setup_users.yml +++ b/roles/rabbitmq/tasks/setup_users.yml @@ -1,21 +1,24 @@ --- - name: Create default admin user - community.rabbitmq.rabbitmq_user: user={{ rabbitmq_admin_user }} - password={{ rabbitmq_admin_password }} - vhost=/ - tags=administrator - state=present + community.rabbitmq.rabbitmq_user: + user: "{{ rabbitmq_admin_user }}" + password: "{{ rabbitmq_admin_password }}" + vhost: / + tags: administrator + state: present - name: Create application user - community.rabbitmq.rabbitmq_user: user={{ rabbitmq_application_user }} - password={{ rabbitmq_application_password }} - vhost={{ rabbitmq_application_vhost }} - configure_priv=.* - read_priv=.* - write_priv=.* - state=present + community.rabbitmq.rabbitmq_user: + user: "{{ rabbitmq_application_user }}" + password: "{{ rabbitmq_application_password }}" + vhost: "{{ rabbitmq_application_vhost }}" + configure_priv: .* + read_priv: .* + write_priv: .* + state: present - name: Ensure the default 'guest' user doesn't exist - community.rabbitmq.rabbitmq_user: user=guest - state=absent + community.rabbitmq.rabbitmq_user: + user: "guest" + state: absent diff --git a/roles/web/tasks/setup_virtualenv.yml b/roles/web/tasks/setup_virtualenv.yml index 1ee2d081..09c80511 100644 --- a/roles/web/tasks/setup_virtualenv.yml +++ b/roles/web/tasks/setup_virtualenv.yml @@ -3,7 +3,7 @@ - name: Install virtualenv ansible.builtin.pip: name: virtualenv - version: 15.1.0 + version: 20.24.6 tags: packages - name: Check if Supervisor exists diff --git a/site.yml b/site.yml index a74e4eb3..056b0939 100644 --- a/site.yml +++ b/site.yml @@ -1,5 +1,5 @@ --- -- ansible.builtin.import_tasks: dbservers.yml +- ansible.builtin.import_playbook: dbservers.yml -- ansible.builtin.import_tasks: webservers.yml +- ansible.builtin.import_playbook: webservers.yml