feat: pg with extensions and open to podmans containers

roles/postgres/defaults/main.yml

@@ -1,15 +1,25 @@
 ---
-# PostgreSQL admin user (used by service roles for database management)
+# PostgreSQL port
+postgres_port: 5432
+
+# PostgreSQL admin user (only for database management)
 postgres_admin_user: postgres
 
 # PostgreSQL admin password (REQUIRED - must be set explicitly)
 # Set via inventory, host_vars, or ansible-vault
-# See this file's comments for setup instructions
-# postgres_admin_password: ""  # Intentionally undefined - role will fail if not set
+# postgres_admin_password: ""
 
 # PostgreSQL data directory
 postgres_data_dir: /var/lib/postgres/data
 
+# Binding address(es)
+postgres_listen_addresses: "127.0.0.1,{{ podman_subnet_gateway | default('10.88.0.1' }}"
+
+# Firewall configuration
+postgres_firewall_allowed_sources:
+  - 127.0.0.0/8 # Localhost
+  - "{{ podman_subnet | default('10.88.0.0/16') }}" # Podman bridge network
+
 # Performance tuning (adjust based on your hardware)
 postgres_shared_buffers: 256MB
 postgres_effective_cache_size: 1GB