kivitendo: activate apache modules

[fsit_smgt.git] / tasks / kivitendo.yml

diff --git a/tasks/kivitendo.yml b/tasks/kivitendo.yml
index 7c288ff03954a6ab9042036f4c677d06271677ba..fba4ee4c7db894d14227e43b6fb51f6a5643459f 100644 (file)
--- a/tasks/kivitendo.yml
+++ b/tasks/kivitendo.yml
@@ -101,7 +101,6 @@
     state: directory
     mode:  'u=Xrw,g=Xrw,o='
 
     state: directory
     mode:  'u=Xrw,g=Xrw,o='
 

-

 - name: Make kivi_documents directory.
   ansible.builtin.file:
     path: /var/www/kivitendo-erp/kivi_documents
 - name: Make kivi_documents directory.
   ansible.builtin.file:
     path: /var/www/kivitendo-erp/kivi_documents


@@ -121,6 +120,38 @@
     - templates
     - webdav
 
     - templates
     - webdav
 

+# postrgesql for kivi
+- name: Remove existing rules to ensure correct ordering of the rules
+  ansible.builtin.postgresql_pg_hba:
+    dest:      /etc/postgresql/17/main/pg_hba.conf
+    overwrite: true
+    contype:   local
+    users:     all
+    databases: all
+    method:    peer
+
+- name: Allow access from localhost to Postgresql.
+  ansible.builtin.postgresql_pg_hba:
+    dest:      /etc/postgresql/17/main/pg_hba.conf
+    contype:   host
+    users:     postgres
+    databases: all
+    address:   127.0.0.1/32
+    method:    trust
+  notify: Restart postgresql
+
+# apache server for kivi
+- name: Activate apache fastcgi, headers and ssl modules.
+  community.general.apache2_module:
+    state: present
+    name: "{{ item }}"
+  loop:
+    - fcgid
+    - headers
+    - ssl
+    - rewrite
+    - socache_shmcb
+#  notify: Enable SSL

 
 # Anleitung adaptiert
 # https://github.com/kivitendo/kivitendo-ansible/blob/master/main.yml
 
 # Anleitung adaptiert
 # https://github.com/kivitendo/kivitendo-ansible/blob/master/main.yml