script-collection/bash/kvm-deploy/user-data/postgres.yml

#cloud-config
users:
  - name: your-user
    lock_passwd: false
    passwd: 
    ssh_authorized_keys:
      - 
    shell: /bin/bash
    groups: wheel
    sudo: ['ALL=(ALL) NOPASSWD: ALL']
write_files:
  - path: /etc/ssh/sshd_config
    content: |
         Protocol 2
         HostKey /etc/ssh/ssh_host_rsa_key
         HostKey /etc/ssh/ssh_host_dsa_key
         HostKey /etc/ssh/ssh_host_ecdsa_key
         HostKey /etc/ssh/ssh_host_ed25519_key         
         SyslogFacility AUTH
         LogLevel INFO
         LoginGraceTime 120
         PasswordAuthentication no
         PermitRootLogin no
         StrictModes yes
         PubkeyAuthentication yes
         IgnoreRhosts yes
         HostbasedAuthentication no
         PermitEmptyPasswords no
         ChallengeResponseAuthentication no
         PrintLastLog yes
         TCPKeepAlive yes
         AcceptEnv LANG LC_*         
         UsePAM yes
prefer_fqdn_over_hostname: true
packages:
  - firewalld
  - vim
  - plocate
  - unzip
  - tar
  - policycoreutils-python-utils
  - rsync
  - nfs-utils
  - bind-utils
runcmd:
  - dnf install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-10-x86_64/pgdg-redhat-repo-latest.noarch.rpm
  - dnf -qy module disable postgresql
  - dnf install -y postgresql17-server