3 Commits

Author	SHA1	Message	Date
Mike Reeves	46e38d39bb	Enable postgres by default ... Safe because postgres states are only applied to manager-type nodes via top.sls and allowed_states.map.jinja.	2026-04-09 12:23:47 -04:00
Mike Reeves	762e73faf5	Add so-postgres host management scripts ... - so-postgres-manage: wraps docker exec for psql operations (sql, sqlfile, shell, dblist, userlist) - so-postgres-start/stop/restart: standard container lifecycle - Scripts installed to /usr/sbin via file.recurse in config.sls	2026-04-09 09:55:42 -04:00
Mike Reeves	868cd11874	Add so-postgres Salt states and integration wiring ... Phase 1 of the PostgreSQL central data platform: - Salt states: init, enabled, disabled, config, ssl, auth, sostatus - TLS via SO CA-signed certs with postgresql.conf template - Two-tier auth: postgres superuser + so_postgres application user - Firewall restricts port 5432 to manager-only (HA-ready) - Wired into top.sls, pillar/top.sls, allowed_states, firewall containers map, docker defaults, CA signing policies, and setup scripts for all manager-type roles	2026-04-08 10:58:52 -04:00