X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprofile%2Fmanifests%2Fpostgresql.pp;h=8dcc4cb7ca4b13364ca31192bb786dbe19aaaeaa;hb=159db2fd0619f93d330bbe9815ece76beca34aba;hp=50e510e3950c68bfa71efcb3064ac950ec3e3e15;hpb=f17c2d0b1679b41a6e80ef921645ab65b6257548;p=perso%2FImmae%2FProjets%2FPuppet.git diff --git a/modules/profile/manifests/postgresql.pp b/modules/profile/manifests/postgresql.pp index 50e510e..8dcc4cb 100644 --- a/modules/profile/manifests/postgresql.pp +++ b/modules/profile/manifests/postgresql.pp @@ -33,6 +33,24 @@ class profile::postgresql { auth_method => 'ident', order => "a1", } + postgresql::server::pg_hba_rule { 'localhost access as postgres user': + description => 'Allow localhost access to postgres user', + type => 'host', + database => 'all', + user => $pg_user, + address => "127.0.0.1/32", + auth_method => 'md5', + order => "a2", + } + postgresql::server::pg_hba_rule { 'localhost ip6 access as postgres user': + description => 'Allow localhost access to postgres user', + type => 'host', + database => 'all', + user => $pg_user, + address => "::1/128", + auth_method => 'md5', + order => "a3", + } postgresql::server::pg_hba_rule { 'deny access to postgresql user': description => 'Deny remote access to postgres user', type => 'host', @@ -40,7 +58,7 @@ class profile::postgresql { user => $pg_user, address => "0.0.0.0/0", auth_method => 'reject', - order => "a2", + order => "a4", } postgresql::server::pg_hba_rule { 'local access':