rewrite postgresql config tasks

roles/postgresql/tasks/postgresql.yml

@@ -19,16 +19,31 @@
     update_cache: true
     cache_valid_time: 3600
 
-- name: Create PostgreSQL Config
-  template:
-    dest: "/etc/postgresql/{{ pgsql_server_version }}/main/postgresql.conf"
-    src: "postgresql.conf.j2"
-    mode: 0644
+- name: Install required system packages
+  apt:
+    name: python3-psycopg2  # needed for postgresql ansible module
+    state: latest
+    update_cache: true
+    cache_valid_time: 3600
+
+- name: Set PostgreSQL parameters
+  community.postgresql.postgresql_set:
+    name: "{{ item.name }}"
+    value: "{{ item.value }}"
+  become_user: postgres
+  register: postgresql_set
+  loop: "{{ pgsql_config }}"
   notify: restart postgresql
 
-- name: Create PostgreSQL Client Authentication Config
-  template:
+- name: Set PostgreSQL Client Authentication
+  community.postgresql.postgresql_pg_hba:
     dest: "/etc/postgresql/{{ pgsql_server_version }}/main/pg_hba.conf"
-    src: "pg_hba.conf.j2"
-    mode: 0644
+    overwrite: false # remove preexisting rules
+    backup: true
+    backup_file: "/etc/postgresql/{{ pgsql_server_version }}/main/pg_hba.conf.backup"
+    # custom defaults
+    rules_behavior: combine
+    contype: host
+    # custom rules
+    rules: "{{ pgsql_client_auth }}"
   notify: reload postgresql