Merge pull request #16 from supabase/develop

supabase/postgres v0.12.0

Author: dragarcia

amazon.json

@@ -3,21 +3,20 @@
     "aws_access_key": "",
     "aws_secret_key": "",
     "region": "",
+    "ami": "",
     "name": ""
   },
   "builders": [{
     "type": "amazon-ebs",
     "access_key": "{{user `aws_access_key`}}",
     "secret_key": "{{user `aws_secret_key`}}",
     "region": "{{user `region`}}",
-    "source_ami": "ami-0f7719e8b7ba25c61",
-    "instance_type": "t2.micro",
+    "source_ami": "{{user `ami`}}",
+    "instance_type": "t2.large",
     "ssh_username": "ubuntu",
     "ami_name": "{{user `name`}}",
     "launch_block_device_mappings": [{
       "device_name": "/dev/sda1",
-      "encrypted": true,
-      "kms_key_id": "44e7e739-21f1-4678-829e-d1ac63d121b4",
       "iops": 400,
       "volume_type": "io1",
       "volume_size": 8,
@@ -35,6 +34,7 @@
       "type": "shell",
       "scripts": [
         "scripts/01-test",
+        "scripts/02-credentials_cleanup.sh",
         "scripts/90-cleanup.sh",
         "scripts/91-log_cleanup.sh",
         "scripts/99-img_check.sh"

ansible/files/ACCC4CF8.asc

@@ -0,0 +1,4 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Download-Upgradeable-Packages "1";
+APT::Periodic::AutocleanInterval "7";
+APT::Periodic::Unattended-Upgrade "1";

ansible/files/apt_periodic

@@ -29,14 +29,12 @@
       file:
         path: /tmp/00-schema.sql
         state: absent
-
-    - name: Set up password for superadmin postgres
-      become: yes
-      become_user: postgres
-      postgresql_user:
-        name: postgres
-        password: "{{ postgres_superadmin_password }}"
 
+    - name: Adjust APT update intervals
+      copy: 
+        src: files/apt_periodic
+        dest: /etc/apt/apt.conf.d/10periodic
+
     - name: UFW - Allow SSH connections
       ufw:
         rule: allow

ansible/files/kong.conf.j2

@@ -43,14 +43,44 @@
     update_cache: yes
     cache_valid_time: 3600
 
+- name: pgAudit - download & install dependencies
+  apt:
+    pkg:
+      - postgresql-server-dev-12
+      - libssl-dev
+      - libkrb5-dev
+    update_cache: yes
+    install_recommends: no
+
+- name: pgAudit - download latest release
+  git:
+    repo: https://github.com/pgaudit/pgaudit.git
+    dest: /tmp/pgaudit
+  become: yes
+
+- name: pgAudit - build
+  make: 
+    chdir: /tmp/pgaudit
+    target: check
+    params:
+      USE_PGXS: 1
+  become: yes
+
+- name: pgAudit - install
+  make:
+    chdir: /tmp/pgaudit
+    target: install
+    params:
+      USE_PGXS: 1
+  become: yes
+
 - name: plv8 - download & install dependencies
   apt:
     pkg:
       - build-essential
       - ca-certificates
       - curl
       - git-core
-      - python
       - gpp
       - cpp
       - pkg-config