feat: (#2) Allow to expose PostgreSQL port to a private network

README.md

@@ -75,6 +75,15 @@ PostgreSQL
 
 A dependency to Passbolt and Gitea.
 
+### Exposing to Kubernetes cluster for performing backups
+
+PostgreSQL instance can be exposed via `5432/tcp` port to a private subnet to let other applications connect to it, or to perform backups.
+
+```yaml
+postgres_forward_port_to_ip: "127.0.0.1"  # use 127.0.0.1 to "disable" port forwarding. Use your private subnet address to expose PostgreSQL into e.g. Kubernetes cluster
+postgres_forward_port_to_port: "5432"
+```
+
 Exposing service using Kubernetes
 ---------------------------------
 

defaults/main.yaml

@@ -58,6 +58,8 @@ pg_admin_user: "anticapitalist"
 pg_admin_password: "read-about-anarchist-syndicalism"
 pg_ip: "172.131.2.210"
 pg_port: "5432"
+postgres_forward_port_to_ip: "127.0.0.1"  # use 127.0.0.1 to "disable" port forwarding. Use your private subnet address to expose PostgreSQL into e.g. Kubernetes cluster
+postgres_forward_port_to_port: "5432"
 
 # ---------
 # Passbolt

tasks/postgres.yaml

@@ -71,6 +71,8 @@
           - type=bind,source=/var/lib/riotkit-core/var/lib/postgresql/data,destination=/var/lib/postgresql/data,relabel=shared
       expose:
           - "5432"
+      ports:
+          - "{{ postgres_forward_port_to_ip }}:{{ postgres_forward_port_to_port }}:5432/tcp"
       generate_systemd:
           path: /etc/systemd/system
           restart_policy: always