Update to 2022-02-18 16:00

roles/pgweb/templates/bookmark.toml.j2

@@ -0,0 +1,18 @@
+{% if item.url is defined %}
+url = "{{ item.url }}"
+{% else %}
+host = "{{ item.host }}"
+database = "{{ item.database }}"
+{% if item.port is defined %}
+port = {{ item.port }}
+{% endif %}
+{% if item.user is defined %}
+user = "{{ item.user }}"
+{% endif %}
+{% if item.pass is defined %}
+password = "{{ item.pass }}"
+{% endif %}
+{% if item.ssl is defined %}
+ssl = "{{ item.ssl }}"
+{% endif %}
+{% endif %}

roles/pgweb/templates/pgweb.service.j2

@@ -0,0 +1,34 @@
+[Unit]
+Description=PgWeb Postgres Browser
+After=network.target
+
+[Service]
+Type=simple
+User={{ pgweb_user }}
+Group={{ pgweb_user }}
+ExecStart={{ pgweb_root_dir }}/bin/pgweb \
+             --listen {{ pgweb_port }} \
+             --bind {{ (pgweb_src_ip | length > 0) | ternary('0.0.0.0','127.0.0.1') }} \
+             --bookmarks-dir={{ pgweb_bookmarks_dir }} \
+{% if not pgweb_ssh_tunnels %}
+             --no-ssh \
+{% endif %}
+             --sessions
+RuntimeDirectory=pgweb
+RestartSec=30
+Restart=always
+NoNewPrivileges=true
+PrivateDevices=true
+ProtectControlGroups=true
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectSystem=strict
+RestrictRealtime=true
+RestrictNamespaces=yes
+ReadWritePaths=/run
+PrivateTmp=true
+MemoryDenyWriteExecute=yes
+
+[Install]
+WantedBy=multi-user.target