Just adding a note (for when we'll work on it), we have to probably adapt existing postgresql role to add remote clients options, and so TLS support (so far we only used role for kojihub with postgresql DB on isame host)

@zlopez : does the koji/mbox deployment support already remote postgresql over TLS ? Trying to see how far I have to investigate at the server side if client side isn't ready for it :)

from my own local tests through network and remote client, psql will try to support TLS if server supports it .
Following commit add centos 8 and tls/remote client support in our postgresql role :

https://github.com/CentOS/ansible-role-postgresql/commit/2257c6415ffda588a0955a635760040ef25fcd3e

Next week I'll have to deploy infra for this and deploy the node. I'll close this ticket when done

role merged in main branch, node deployed and ready to be consumed by/for mbox deployment.
Git commit for details :

* 2625c44 - (HEAD -> master, origin/master, origin/HEAD) Adding pgsql1 (CentOS 8) node details in inventory and provisining step finished (7 seconds ago) <Fabian Arrotin>