声明式管理 Proxmox API 对象与 Samba DNS 上游

infrastructure/proxmox/ansible/roles/vyos_router/defaults/main.yml

@@ -71,3 +71,9 @@ vyos_ospf_router_id: "192.168.10.2"
 vyos_ospf_area: "0"
 vyos_ospf_networks:
   - "192.168.10.0/24"
+
+# Stable K3s datastore endpoint. Only the declared writable primary is present
+# in the backend; PostgreSQL health checks must never be treated as promotion.
+vyos_postgresql_listen_address: "10.60.0.1"
+vyos_postgresql_port: 5432
+vyos_postgresql_primary_address: "10.60.0.11"

infrastructure/proxmox/ansible/roles/vyos_router/templates/vyos.conf.j2

@@ -29,6 +29,17 @@ set protocols ospf area {{ vyos_ospf_area }} network {{ i.network }}
 set protocols ospf interface {{ i.iface }} passive
 {% endfor %}
 
+{# --- K3s PostgreSQL datastore: fixed endpoint, explicitly selected primary --- #}
+set load-balancing haproxy service sandbox-postgresql listen-address {{ vyos_postgresql_listen_address }}
+set load-balancing haproxy service sandbox-postgresql port {{ vyos_postgresql_port }}
+set load-balancing haproxy service sandbox-postgresql mode 'tcp'
+set load-balancing haproxy service sandbox-postgresql backend 'sandbox-postgresql-primary'
+set load-balancing haproxy backend sandbox-postgresql-primary mode 'tcp'
+set load-balancing haproxy backend sandbox-postgresql-primary health-check 'pgsql'
+set load-balancing haproxy backend sandbox-postgresql-primary server primary address {{ vyos_postgresql_primary_address }}
+set load-balancing haproxy backend sandbox-postgresql-primary server primary port {{ vyos_postgresql_port }}
+set load-balancing haproxy backend sandbox-postgresql-primary server primary check
+
 {# --- management --- #}
 set service ssh port 22