#-----------------------------
# cluster: pg-meta
#-----------------------------
pg-meta:
  # - cluster members - #
  hosts:
    10.10.10.10: {pg_seq: 1, pg_role: primary, ansible_host: meta}

  # - cluster configs - #
  vars:
    pg_cluster: pg-meta                 # define actual cluster name
    pg_version: 13                      # define installed pgsql version
    node_tune: tiny                     # tune node into oltp|olap|crit|tiny mode
    pg_conf: tiny.yml                   # tune pgsql into oltp/olap/crit/tiny mode
    patroni_mode: pause                 # enter maintenance mode, {default|pause|remove}
    patroni_watchdog_mode: off          # disable watchdog (require|automatic|off)
    pg_lc_ctype: en_US.UTF8             # enabled pg_trgm i18n char support

    pg_users:
      # complete example of user/role definition for production user
      - name: dbuser_meta               # example production user have read-write access
        password: DBUser.Meta           # example user's password, can be encrypted
        login: true                     # can login, true by default (should be false for role)
        superuser: false                # is superuser? false by default
        createdb: false                 # can create database? false by default
        createrole: false               # can create role? false by default
        inherit: true                   # can this role use inherited privileges?
        replication: false              # can this role do replication? false by default
        bypassrls: false                # can this role bypass row level security? false by default
        connlimit: -1                   # connection limit, -1 disable limit
        expire_at: '2030-12-31'         # 'timestamp' when this role is expired
        expire_in: 365                  # now + n days when this role is expired (OVERWRITE expire_at)
        roles: [dbrole_readwrite]       # dborole_admin|dbrole_readwrite|dbrole_readonly
        pgbouncer: true                 # add this user to pgbouncer? false by default (true for production user)
        parameters:                     # user's default search path
          search_path: public
        comment: test user

      # simple example for personal user definition
      - name: dbuser_vonng              # personal user example which only have limited access to offline instance
        password: DBUser.Vonng          # or instance with explict mark `pg_offline_query = true`
        roles: [dbrole_offline]         # personal/stats/ETL user should be grant with dbrole_offline
        expire_in: 365                  # expire in 365 days since creation
        pgbouncer: false                # personal user should NOT be allowed to login with pgbouncer
        comment: example personal user for interactive queries

    pg_databases:
      - name: meta                      # name is the only required field for a database
        owner: postgres                 # optional, database owner
        template: template1             # optional, template1 by default
        encoding: UTF8                # optional, UTF8 by default , must same as template database, leave blank to set to db default
        locale: C                     # optional, C by default , must same as template database, leave blank to set to db default
        lc_collate: C                 # optional, C by default , must same as template database, leave blank to set to db default
        lc_ctype: C                   # optional, C by default , must same as template database, leave blank to set to db default
        allowconn: true                 # optional, true by default, false disable connect at all
        revokeconn: false               # optional, false by default, true revoke connect from public # (only default user and owner have connect privilege on database)
        # tablespace: pg_default          # optional, 'pg_default' is the default tablespace
        connlimit: -1                   # optional, connection limit, -1 or none disable limit (default)
        extensions:                     # optional, extension name and where to create
          - {name: postgis, schema: public}
        parameters:                     # optional, extra parameters with ALTER DATABASE
          enable_partitionwise_join: true
        pgbouncer: true                 # optional, add this database to pgbouncer list? true by default
        comment: pigsty meta database   # optional, comment string for database

    pg_default_database: meta           # default database will be used as primary monitor target

    # proxy settings
    vip_mode: l2                      # enable/disable vip (require members in same LAN)
    vip_address: 10.10.10.2             # virtual ip address
    vip_cidrmask: 8                     # cidr network mask length
    vip_interface: eth1                 # interface to add virtual ip