dotfiles/ansible/mariadb_users.yml

---
- hosts: osuv
  vars:
    NC_TOKEN: "{{ lookup('env', 'NC_TOKEN') }}"
    MARIADB_PASSWORD: "{{ lookup('nc_password', 'root_mariadb_password' , host='home.osuv.de', user='m', token=NC_TOKEN) }}"
    dbs:
      - nextcloud
      - gitea
      - grafana

  tasks:
    - name: "databases must be present"
      mysql_db:
        login_host: 127.0.0.1
        login_password: "{{ MARIADB_PASSWORD }}"
        login_port: 3307
        login_user: m
        name: "{{ item }}"
        state: present
        encoding: utf8mb4
      with_items: "{{ dbs }}"

    - name: "add or update user"
      mysql_user:
        login_host: 127.0.0.1
        login_password: "{{ MARIADB_PASSWORD }}"
        login_port: 3306
        login_user: m
        name: "{{ item }}"
        host: "%"
        password: "{{ lookup('nc_password', item + '_mariadb_password' , host='home.osuv.de', user='m', token=NC_TOKEN) }}"
        priv: "{{ item }}.*:ALL"
        state: present
      with_items: "{{ list }}"