roles/postgres: Create a new postgres_ssl_hosts variable that will be used to...

roles/postgres: Create a new postgres_ssl_hosts variable that will be used to determine which hosts can login using ssl

roles/postgres/defaults/main.yml

@@ -9,3 +9,5 @@ postgres_ssl_key_file: '/etc/letsencrypt/live/{{ inventory_hostname }}/privkey.p
 postgres_ssl_ca_file: '/etc/letsencrypt/live/{{ inventory_hostname }}/chain.pem'
 
 postgres_shared_buffers: '128MB'
+
+postgres_ssl_hosts: []

roles/postgres/templates/pg_hba.conf.j2

+
 # PostgreSQL Client Authentication Configuration File
 # ===================================================
 #
@@ -94,3 +95,8 @@ host    sameuser        all             ::1/128                 md5
 #local   replication     postgres                                trust
 #host    replication     postgres        127.0.0.1/32            trust
 #host    replication     postgres        ::1/128                 trust
+{% if postgres_ssl_hosts %}
+{% for host in postgres_ssl_hosts %}
+hostssl all             all             {{ host }}              md5
+{% endfor %}
+{% endif %}