Add re-key support for soju and postgresql

- soju: add change-password task so admin password updates on every
  playbook run via sojudb change-password
- postgresql: remove superuser password task — postgres uses peer auth
  (Unix socket), no password needed or desired

1 files changed, 7 insertions, 0 deletions

diff --git a/soju/tasks/main.yaml b/soju/tasks/main.yaml
index a1f2963..7a4c25f 100644
--- a/soju/tasks/main.yaml
+++ b/soju/tasks/main.yaml
@@ -53,6 +53,13 @@
   failed_when: soju_create_user.rc != 0 and 'duplicate key' not in soju_create_user.stderr
   no_log: true
 
+- name: update soju admin password
+  become: yes
+  become_user: "{{soju_user}}"
+  shell: "echo '{{soju_admin_password}}' | sojudb -config /etc/soju/config change-password {{soju_admin_user}}"
+  changed_when: false
+  no_log: true
+
 - name: install nginx stream config
   become: yes
   template: