Skip to content

Commit 909e338

Browse files
vitabaksvitabaks
committed
system variables moved to system.yml variable file.
/vars/system.yml
1 parent b244898 commit 909e338

File tree

5 files changed

+107
-102
lines changed

5 files changed

+107
-102
lines changed

‎README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -159,7 +159,7 @@ proxy_env:
159159
---
160160

161161
## Variables
162-
See the vars/[main.yml](./vars/main.yml) and ([Debian.yml](./vars/Debian.yml) or [RedHat.yml](./vars/RedHat.yml)) files for more details.
162+
See the vars/[main.yml](./vars/main.yml), [system.yml](./vars/system.yml) and ([Debian.yml](./vars/Debian.yml) or [RedHat.yml](./vars/RedHat.yml)) files for more details.
163163

164164

165165
## Scaling: add a new node to an existing postgres cluster

‎add_pgnode.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
gather_facts: true
99
vars_files:
1010
- vars/main.yml
11+
- vars/system.yml
1112
- "vars/{{ ansible_os_family }}.yml"
1213
vars:
1314
existing_pgcluster: true

‎deploy_pgcluster.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
gather_facts: true
99
vars_files:
1010
- vars/main.yml
11+
- vars/system.yml
1112
- "vars/{{ ansible_os_family }}.yml"
1213

1314

‎vars/main.yml

Lines changed: 1 addition & 101 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
# Proxy variables (for offline installation)
2+
# Proxy variables (optional) for download packages using a proxy server
33
proxy_env: {}
44
# http_proxy: http://10.128.64.9:3128
55
# https_proxy: http://10.128.64.9:3128
@@ -197,103 +197,3 @@ pgbouncer_users:
197197
# - { username: "", password: "" }
198198

199199

200-
# System variables
201-
ntp_enabled: 'false' # specify 'true' if you want to install and configure the ntp service
202-
ntp_servers: []
203-
# - "10.128.64.44"
204-
# - "10.128.64.45"
205-
206-
timezone: []
207-
#timezone: "Europe/Moscow"
208-
209-
# Generate locale
210-
## (except RHEL>=8,use glibc-langpack)
211-
locales:
212-
- { language_country: "en_US", encoding: "UTF-8" }
213-
- { language_country: "ru_RU", encoding: "UTF-8" } # optional
214-
# - { language_country: "", encoding: "" }
215-
216-
217-
# Kernel parameters
218-
# these parameters for example! Specify kernel options for your system
219-
sysctl_conf:
220-
- { name: "vm.swappiness", value: "1" }
221-
- { name: "vm.min_free_kbytes", value: "102400" }
222-
- { name: "vm.dirty_expire_centisecs", value: "1000" }
223-
- { name: "vm.dirty_background_bytes", value: "67108864" }
224-
- { name: "vm.dirty_bytes", value: "536870912" }
225-
# - { name: "vm.nr_hugepages", value: "9510" } # example "9510"=18GB
226-
- { name: "vm.zone_reclaim_mode", value: "0" }
227-
- { name: "kernel.numa_balancing", value: "0" }
228-
- { name: "kernel.sched_migration_cost_ns", value: "5000000" }
229-
- { name: "kernel.sched_autogroup_enabled", value: "0" }
230-
- { name: "net.ipv4.ip_nonlocal_bind", value: "1" }
231-
- { name: "net.ipv4.ip_forward", value: "1" }
232-
- { name: "net.ipv4.ip_local_port_range", value: "1024 65535" }
233-
- { name: "net.netfilter.nf_conntrack_max", value: "1048576" }
234-
# - { name: "", value: "" }
235-
# - { name: "", value: "" }
236-
237-
238-
# Transparent Huge Pages
239-
disable_thp: 'true' # or 'false'
240-
241-
242-
# Max open file limit
243-
set_limits: 'true' # or 'false'
244-
limits_user: "postgres"
245-
soft_nofile: 65536
246-
hard_nofile: 200000
247-
248-
249-
# I/O Scheduler (optional)
250-
set_scheduler: 'false' # or 'true'
251-
scheduler:
252-
- { sched: "deadline" , nr_requests: "1024", device: "sda" }
253-
# - { sched: "noop" , nr_requests: "1024", device: "sdb" }
254-
# - { sched: "" , nr_requests: "1024", device: "" }
255-
256-
# Non-multiqueue I/O schedulers:
257-
# cfq - for desktop systems and slow SATA drives
258-
# deadline - for SAS drives (recommended for databases)
259-
# noop - for SSD drives
260-
# Multiqueue I/O schedulers (blk-mq):
261-
## (Recommend the use of blk-mq in environments that support it. For Fast SSD Storage and Linux kernel 4.12+)
262-
# mq-deadline - (recommended for databases)
263-
# none - (ideal for fast random I/O devices such as NVMe)
264-
# bfq - (avoid for databases)
265-
# kyber
266-
267-
268-
# SSH Keys (optional)
269-
enable_ssh_key_based_authentication: 'false' # or 'true' for configure SSH Key-Based Authentication
270-
ssh_key_user: "postgres"
271-
ssh_key_state: "present"
272-
ssh_known_hosts: "{{ groups['postgres_cluster'] }}"
273-
274-
275-
# Firewall (ansible-role-firewall)
276-
# https://github.com/geerlingguy/ansible-role-firewall
277-
firewall_enabled_at_boot: true
278-
279-
firewall_allowed_tcp_ports:
280-
- "{{ ansible_ssh_port }}"
281-
- "{{ postgresql_port }}"
282-
- "{{ pgbouncer_listen_port }}"
283-
- "2379" # ETCD port
284-
- "2380" # ETCD port
285-
- "8008" # Patroni REST API port
286-
- "5000" # HAProxy (read/write) master
287-
- "5001" # HAProxy (read only) all replicas
288-
- "5002" # HAProxy (read only) synchronous replica only
289-
- "5003" # HAProxy (read only) asynchronous replicas only
290-
- "7000" # HAProxy stats
291-
292-
firewall_additional_rules:
293-
- "iptables -p vrrp -A INPUT -j ACCEPT" # Keepalived (vrrp)
294-
- "iptables -p vrrp -A OUTPUT -j ACCEPT" # Keepalived (vrrp)
295-
296-
# disable firewalld (installed by default on RHEL/CentOS) or ufw (installed by default on Ubuntu)
297-
firewall_disable_firewalld: true
298-
firewall_disable_ufw: true
299-

‎vars/system.yml

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,103 @@
1+
---
2+
# System variables
3+
4+
ntp_enabled: 'false' # specify 'true' if you want to install and configure the ntp service
5+
ntp_servers: []
6+
# - "10.128.64.44"
7+
# - "10.128.64.45"
8+
9+
timezone: []
10+
#timezone: "Europe/Moscow"
11+
12+
# Generate locale
13+
## (except RHEL>=8,use glibc-langpack)
14+
locales:
15+
- { language_country: "en_US", encoding: "UTF-8" }
16+
- { language_country: "ru_RU", encoding: "UTF-8" } # optional
17+
# - { language_country: "", encoding: "" }
18+
19+
20+
# Kernel parameters
21+
# these parameters for example! Specify kernel options for your system
22+
sysctl_conf:
23+
- { name: "vm.swappiness", value: "1" }
24+
- { name: "vm.min_free_kbytes", value: "102400" }
25+
- { name: "vm.dirty_expire_centisecs", value: "1000" }
26+
- { name: "vm.dirty_background_bytes", value: "67108864" }
27+
- { name: "vm.dirty_bytes", value: "536870912" }
28+
# - { name: "vm.nr_hugepages", value: "9510" } # example "9510"=18GB
29+
- { name: "vm.zone_reclaim_mode", value: "0" }
30+
- { name: "kernel.numa_balancing", value: "0" }
31+
- { name: "kernel.sched_migration_cost_ns", value: "5000000" }
32+
- { name: "kernel.sched_autogroup_enabled", value: "0" }
33+
- { name: "net.ipv4.ip_nonlocal_bind", value: "1" }
34+
- { name: "net.ipv4.ip_forward", value: "1" }
35+
- { name: "net.ipv4.ip_local_port_range", value: "1024 65535" }
36+
- { name: "net.netfilter.nf_conntrack_max", value: "1048576" }
37+
# - { name: "", value: "" }
38+
# - { name: "", value: "" }
39+
40+
41+
# Transparent Huge Pages
42+
disable_thp: 'true' # or 'false'
43+
44+
45+
# Max open file limit
46+
set_limits: 'true' # or 'false'
47+
limits_user: "postgres"
48+
soft_nofile: 65536
49+
hard_nofile: 200000
50+
51+
52+
# I/O Scheduler (optional)
53+
set_scheduler: 'false' # or 'true'
54+
scheduler:
55+
- { sched: "deadline" , nr_requests: "1024", device: "sda" }
56+
# - { sched: "noop" , nr_requests: "1024", device: "sdb" }
57+
# - { sched: "" , nr_requests: "1024", device: "" }
58+
59+
# Non-multiqueue I/O schedulers:
60+
# cfq - for desktop systems and slow SATA drives
61+
# deadline - for SAS drives (recommended for databases)
62+
# noop - for SSD drives
63+
# Multiqueue I/O schedulers (blk-mq):
64+
## (Recommend the use of blk-mq in environments that support it. For Fast SSD Storage and Linux kernel 4.12+)
65+
# mq-deadline - (recommended for databases)
66+
# none - (ideal for fast random I/O devices such as NVMe)
67+
# bfq - (avoid for databases)
68+
# kyber
69+
70+
71+
# SSH Keys (optional)
72+
enable_ssh_key_based_authentication: 'false' # or 'true' for configure SSH Key-Based Authentication
73+
ssh_key_user: "postgres"
74+
ssh_key_state: "present"
75+
ssh_known_hosts: "{{ groups['postgres_cluster'] }}"
76+
77+
78+
# Firewall (ansible-role-firewall)
79+
# https://github.com/geerlingguy/ansible-role-firewall
80+
firewall_enabled_at_boot: true
81+
82+
firewall_allowed_tcp_ports:
83+
- "{{ ansible_ssh_port }}"
84+
- "{{ postgresql_port }}"
85+
- "{{ pgbouncer_listen_port }}"
86+
- "2379" # ETCD port
87+
- "2380" # ETCD port
88+
- "8008" # Patroni REST API port
89+
- "5000" # HAProxy (read/write) master
90+
- "5001" # HAProxy (read only) all replicas
91+
- "5002" # HAProxy (read only) synchronous replica only
92+
- "5003" # HAProxy (read only) asynchronous replicas only
93+
- "7000" # HAProxy stats
94+
95+
firewall_additional_rules:
96+
- "iptables -p vrrp -A INPUT -j ACCEPT" # Keepalived (vrrp)
97+
- "iptables -p vrrp -A OUTPUT -j ACCEPT" # Keepalived (vrrp)
98+
99+
# disable firewalld (installed by default on RHEL/CentOS) or ufw (installed by default on Ubuntu)
100+
firewall_disable_firewalld: true
101+
firewall_disable_ufw: true
102+
103+

0 commit comments

Comments
 (0)