nextcloud: Support remote database server

The _nextcloud_ role originally handled setting up the PostgreSQL
database and assumed that it was running on the same server as Nextcloud
itself.  I have factored out those tasks into their own role,
_nextcloud-db_, which can be applied to a separate host.

I have also introduced some new variables (`nextcloud_db_host`,
`nextcloud_db_name`, `nextcloud_db_user`, and `nextcloud_db_password`),
which can be used to specify how to connect to the database, if it is
hosted remotely.  Since these variables are used by both the _nextcloud_
and _nextcloud-db_ roles, they are actually defined in a separate role,
_nextcloud-base_, upon which both depend.

nextcloud.yml

@@ -1,7 +1,14 @@
+- hosts: nextcloud-db
+  vars_files:
+  - vault/nextcloud
+  roles:
+  - role: nextcloud-db
+    tags:
+    - nextcloud-db
+
 - hosts: nextcloud
   vars_files:
   - vault/nextcloud
   roles:
-  - postgresql-server
   - apache
   - nextcloud

roles/nextcloud-base/defaults/main.yml

@@ -0,0 +1,4 @@
+nextcloud_db_name: nextcloud
+nextcloud_db_host: localhost
+nextcloud_db_port: ''
+nextcloud_db_user: nextcloud

roles/nextcloud-db/meta/main.yml

@@ -0,0 +1,2 @@
+dependencies:
+- nextcloud-base

roles/nextcloud-db/tasks/main.yml

@@ -0,0 +1,19 @@
+- name: ensure nextcloud database user exists
+  become: true
+  become_user: postgres
+  postgresql_user:
+    name: '{{ nextcloud_db_user }}'
+    password: '{{ nextcloud_db_password|d(omit) }}'
+    state: present
+  tags:
+  - postgresql-user
+
+- name: ensure nextcloud database exists
+  become: true
+  become_user: postgres
+  postgresql_db:
+    name: nextcloud
+    owner: nextcloud
+    state: present
+  tags:
+  - postgresql-db

roles/nextcloud/meta/main.yml

@@ -1,4 +1,5 @@
 dependencies:
+- nextcloud-base
 - role: redis
   tags:
   - redis

roles/nextcloud/tasks/main.yml

@@ -27,21 +27,6 @@
   tags:
   - always
 
-- name: ensure nextcloud database user exists
-  become: true
-  become_user: postgres
-  postgresql_user:
-    name: nextcloud
-    password: '{{ nextcloud_db_password }}'
-    state: present
-- name: ensure nextcloud database exists
-  become: true
-  become_user: postgres
-  postgresql_db:
-    name: nextcloud
-    owner: nextcloud
-    state: present
-
 - name: ensure nextcloud is configured
   template:
     src: config.php.j2

roles/nextcloud/templates/config.php.j2

@@ -37,12 +37,12 @@ $CONFIG = array (
   'dbtype' => 'pgsql',
   'version' => '{{ nc_version }}',
   'overwrite.cli.url' => 'https://{{ nextcloud_server_name }}',
-  'dbname' => 'nextcloud',
+  'dbname' => '{{ nextcloud_db_name }}',
-  'dbhost' => 'localhost',
+  'dbhost' => '{{ nextcloud_db_host }}',
-  'dbport' => '',
+  'dbport' => '{{ nextcloud_db_port }}',
   'dbtableprefix' => 'oc_',
-  'dbuser' => 'nextcloud',
+  'dbuser' => '{{ nextcloud_db_user }}',
-  'dbpassword' => '{{ nextcloud_db_password }}',
+  'dbpassword' => '{{ nextcloud_db_password|d("") }}',
   'installed' => true,
   'ldapIgnoreNamingRules' => false,
   'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',