Kevin and team required an HA Postgresql db service for their Aruba Clearpass radius server.

I forked this repository, updated automation/var/main.yaml and automation/inventory.

Made a few changes for our environment.

Servers

• HAProxy load balancer to cpsql.its.ucsb.edu
• • Listens on port 5000 instead of typical port 5423
• Postgresql v.16 to cpsql1.its.ucsb.edu and cpsql2.its.ucsb.edu
• • Only accepts postgresql traffic from cpsql.its.ucsb.edu

Users

• admin - super admin - password in Delinea
• Kevin - super admin - password in Delinea
• clearpass - read only to clearpassdb - password in Delinea

in /etc/cron.daily/backup_postgresql

# delete backups older than 40 days
10 0 * * * /usr/bin/find /backup -name "*.backup" -type f -mtime +40 -delete
# run backup script
0 0 * * * /bin/bash /usr/local/bin/backup_pg.sh