Merge pull request #9 from audreyr/master

Add pg_hba.conf, and creation of user/db

pillar.example

@@ -6,3 +6,6 @@
 postgres:
   lookup:
     pkg: postgresql-9.3
+  db:
+    name: mydb
+    user: mydb

postgres/init.sls

@@ -8,6 +8,39 @@ postgresql:
     - running
     - enable: true
     - name: {{ postgres.service }}
+    - watch:
+      - file: {{ postgres.pg_hba }}
     - require:
       - pkg: {{ postgres.pkg }}
 
+pg_hba.conf:
+  file.managed:
+    - name: {{ postgres.pg_hba }}
+    - source: salt://postgres/pg_hba.conf
+    - template: jinja
+    - user: postgres
+    - group: postgres
+    - mode: 644
+    - require:
+      - pkg: {{ postgres.pkg }}
+
+postgres-app-user:
+  postgres_user.present:
+    - name: {{ pillar['postgres']['db']['user'] }}
+    - createdb: {{ pillar['postgres']['db']['createdb'] }}
+    - password: {{ pillar['postgres']['db']['password'] }}
+    - runas: postgres
+    - require:
+      - service: {{ postgres.service }}
+
+postgres-app-db:
+  postgres_database.present:
+    - name: {{ pillar['postgres']['db']['name'] }}
+    - encoding: UTF8
+    - lc_ctype: en_US.UTF8
+    - lc_collate: en_US.UTF8
+    - template: template0
+    - owner: {{ pillar['postgres']['db']['user'] }}
+    - runas: postgres
+    - require:
+        - postgres_user: postgres-app-user

postgres/map.jinja

@@ -3,6 +3,7 @@
         'pkg': 'postgresql-9.1',
         'python': 'python-pygresql',
         'service': 'postgresql',
+        'pg_hba': '/etc/postgresql/9.1/main/pg_hba.conf',
     },
     'RedHat': {
         'pkg': 'postgresql',

postgres/pg_hba.conf

@@ -0,0 +1,20 @@
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+
+local  {{ pillar['postgres']['db']['name'] }}        {{ pillar['postgres']['db']['user'] }}                               md5
+
+# DO NOT DISABLE!
+# If you change this first entry you will need to make sure that the
+# database superuser can access the database using some other method.
+# Noninteractive access to all databases is required during automatic
+# maintenance (custom daily cronjobs, replication, and similar tasks).
+#
+# Database administrative login by Unix domain socket
+local   all             postgres                                peer
+
+
+# "local" is for Unix domain socket connections only
+local   all             all                                     trust
+# IPv4 local connections:
+host    all             all             127.0.0.1/32            trust
+# IPv6 local connections:
+host    all             all             ::1/128                 trust