Use variable for pg config file.
Allow additional listen IP for Postgres.
Fix various bungups.
Added some basic dependency info to roles.
Add trusted upstream (app) servers to PG HBA conf.
Weekly logrotate is best.
Group doesn't need write on archived logs.