Multi-cloud & platform-agnosticLive-tested

PostgreSQL Server (EL)

Name: PostgreSQL Server (EL)
Brand: IaC Bazaar
SKU: ansible-postgresql
Price: 29.00 USD
Availability: InStock

PostgreSQL server with guarded initdb, SCRAM-SHA-256 auth, managed conf.d drop-in, templated pg_hba, and app database + owner provisioning. Original, live-tested (Molecule/podman) role.

ansibleDatabases

Verification

Live-tested

Really deployed to a container sandbox, proven idempotent (a second run changes nothing), verified against the role’s assertions, then torn down.

Conformance

Static validation (yamllint · ansible-lint)

Provenance

SHA-256 checksum
Cosign signature

Functional

Live-tested - applied, verified, destroyed

Last verified 2026-06-10 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o ansible-postgresql-1.0.0.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/ansible-postgresql/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle ansible-postgresql-1.0.0.sigstore.json \
  ansible-postgresql-1.0.0.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "d4f9cf63291177c67c3da04af7b71e9eba4a9ed4a7c565e495f853dae8cec13c  ansible-postgresql-1.0.0.tar.gz" | sha256sum -c

Signature bundle Public key Machine-readable receipt How we verify

Documentation

postgresql-server

PostgreSQL server for Enterprise Linux as an idempotent Ansible role: package install, guarded initdb, SCRAM-SHA-256 authentication, a managed conf.d configuration drop-in, a templated pg_hba.conf, and provisioning of one application database + owner. Original work — not derived from a third-party role. Rocky/EL 10 ships PostgreSQL 16.

Live-tested with Molecule + podman (converge + idempotence + functional verify) on a systemd-enabled Rocky Linux 10 image.

What it does:

Installs postgresql-server + python3-psycopg2 via dnf.
Runs postgresql-setup --initdb exactly once (guarded by PG_VERSION in the data directory).
Enables include_dir = 'conf.d' and drops in a managed config: password_encryption = scram-sha-256, configurable listen_addresses (default localhost) and port.
Templates pg_hba.conf: local peer for postgres, SCRAM over loopback, plus your own extra rules (postgresql_server_hba_extra_rules).
Enables + starts the postgresql systemd service; restarts on config change.
Creates one application database and its owner role with a password (via the community.postgresql collection — see requirements.yml).

Requirements

EL 9/10 target with systemd (tested on Rocky Linux 10 / PostgreSQL 16).
The community.postgresql collection on the controller: ansible-galaxy collection install -r requirements.yml

License

Usage code & full reference unlock after purchase

The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.

Variables
Test