Add secure postgres deployment

This commit is contained in:
Thomas Kleinendorst 2024-10-06 17:45:04 +02:00
parent 2b1518a5c3
commit cfb228cada
15 changed files with 115 additions and 26 deletions

View file

@ -15,13 +15,14 @@
- role: basic-intalls
- role: user
- role: cloudflare-ddns
- role: cloudflared
- role: nginx
- role: actual
- role: changedetection
- role: pi-hole
- role: monitoring
- role: postgres
- role: wedding
- role: cloudflared
vars:
# devsec.hardening.ssh_hardening vars:
ssh_client_port: 22 # Default, but duplicated here for documentation purpose. Not changed because its only accessible via LAN.