Add pg_hba.conf, Ubuntu mapping, and example..
This commit is contained in:
@@ -6,3 +6,6 @@
|
|||||||
postgres:
|
postgres:
|
||||||
lookup:
|
lookup:
|
||||||
pkg: postgresql-9.3
|
pkg: postgresql-9.3
|
||||||
|
db:
|
||||||
|
name: mydb
|
||||||
|
user: mydb
|
||||||
@@ -11,3 +11,12 @@ postgresql:
|
|||||||
- require:
|
- require:
|
||||||
- pkg: {{ postgres.pkg }}
|
- pkg: {{ postgres.pkg }}
|
||||||
|
|
||||||
|
pg_hba.conf:
|
||||||
|
file.managed:
|
||||||
|
- name: {{ postgres.pg_hba }}
|
||||||
|
- source: salt://postgres/pg_hba.conf
|
||||||
|
- user: postgres
|
||||||
|
- group: postgres
|
||||||
|
- mode: 644
|
||||||
|
- require:
|
||||||
|
- pkg: {{ postgres.pkg }}
|
||||||
@@ -14,4 +14,10 @@
|
|||||||
'python': 'python-psycopg2',
|
'python': 'python-psycopg2',
|
||||||
'service': 'postgresql',
|
'service': 'postgresql',
|
||||||
},
|
},
|
||||||
|
'Ubuntu': {
|
||||||
|
'pkg': 'postgresql-9.3',
|
||||||
|
'python': 'libpq-dev',
|
||||||
|
'service': 'postgresql',
|
||||||
|
'pg_hba': '/etc/postgresql/9.3/main/pg_hba.conf',
|
||||||
|
},
|
||||||
}, merge=salt['pillar.get']('postgres:lookup')) %}
|
}, merge=salt['pillar.get']('postgres:lookup')) %}
|
||||||
|
|||||||
20
postgres/pg_hba.conf
Normal file
20
postgres/pg_hba.conf
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
# TYPE DATABASE USER ADDRESS METHOD
|
||||||
|
|
||||||
|
local {{ pillar['postgres']['db']['name'] }} {{ pillar['postgres']['db']['user'] }} md5
|
||||||
|
|
||||||
|
# DO NOT DISABLE!
|
||||||
|
# If you change this first entry you will need to make sure that the
|
||||||
|
# database superuser can access the database using some other method.
|
||||||
|
# Noninteractive access to all databases is required during automatic
|
||||||
|
# maintenance (custom daily cronjobs, replication, and similar tasks).
|
||||||
|
#
|
||||||
|
# Database administrative login by Unix domain socket
|
||||||
|
local all postgres peer
|
||||||
|
|
||||||
|
|
||||||
|
# "local" is for Unix domain socket connections only
|
||||||
|
local all all trust
|
||||||
|
# IPv4 local connections:
|
||||||
|
host all all 127.0.0.1/32 trust
|
||||||
|
# IPv6 local connections:
|
||||||
|
host all all ::1/128 trust
|
||||||
Reference in New Issue
Block a user