postgresql_hardening role

[sas101]

First of all, thank you for the very useful ansible collection and the existing roles - they make my setup and hardening efforts really painless.

I'm wondering, if there are any plans to also create a postgresql hardening role for ansible? Similar to the mysql hardening role.

Is there any demand / interest in this - or is it just me?

The baseline is described on the website: https://dev-sec.io/baselines/postgres/
But a bit outdated, since the password for example should nowadays be scram-sha256, however that is present in the postgres-baseline repository: https://github.com/dev-sec/postgres-baseline

[rndmh3ro]

See dev-sec/postgres-baseline#20

We do have plans to create a role for postgres-hardening and have already done some initial steps for it.