From 9e0f354a6622a51e113bc7fa08c6f13255d0c042 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Mon, 10 Jun 2019 13:49:00 +0200
Subject: added info to finalize mongodb auth

---
 roles/elevate/liquidtruth/tasks/mongodb.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

(limited to 'roles/elevate/liquidtruth')

diff --git a/roles/elevate/liquidtruth/tasks/mongodb.yml b/roles/elevate/liquidtruth/tasks/mongodb.yml
index 8d5180ae..77355f0f 100644
--- a/roles/elevate/liquidtruth/tasks/mongodb.yml
+++ b/roles/elevate/liquidtruth/tasks/mongodb.yml
@@ -29,6 +29,14 @@
 #   ignore_errors: true
 #   no_log: true
 
-# - name: initialize authorization
-#   include_tasks: mongodb_authorization.yml
-#   when: mongodb_root_user_check
+##
+## $ mongo
+## > use admin
+## > db.createUser({ user: "root", pwd: "<secret>", roles: [ { role: "root", db: "admin" } ] })
+## > db.createUser({ user: "backup", pwd: "<secret>", roles: [ { role: "backup", db: "admin" }, { role: "clusterMonitor", db: "admin" } ] })
+## > db.createUser({ user: "lt", pwd: "<secret>", roles: [ { role: "dbOwner", db: "lt" } ] })
+## > exit
+##
+## edit /etc/mongodb.conf: uncomment 'auth = true'
+## Restart mongodb
+##
-- 
cgit v1.2.3