environment:
  PG_DOMAIN: gurgul.org


packages:
  - postgresql
  - postgresql-contrib

steps:
  - $SUDO systemctl enable postgresql
  - $SUDO systemctl start postgresql
  # Installing certificates
  - $SUDO mkdir /etc/postgresql/ssl
  - $SUDO cp /etc/letsencrypt/live/$PG_DOMAIN/fullchain.pem /etc/postgresql/ssl/server.crt
  - $SUDO cp /etc/letsencrypt/live/$PG_DOMAIN/privkey.pem /etc/postgresql/ssl/server.key
  - $SUDO chown postgres:postgres /etc/postgresql/ssl/server.*
  - $SUDO chmod 600 /etc/postgresql/ssl/server.key


actions:
  # dat action postgresql:add-user -u user
  add-user:
    - sudo -u postgres createuser --no-superuser --no-createdb --no-createrole $DB_USER
    - sudo -u postgres createdb -O $DB_USER $DB_USER