Skip to content

Commit 0299aa5

Browse files
author
Michael Watters
committed
Clean up definition of pg_hba rules
1 parent 711a729 commit 0299aa5

File tree

1 file changed

+45
-38
lines changed

1 file changed

+45
-38
lines changed

manifests/server/config.pp

+45-38
Original file line numberDiff line numberDiff line change
@@ -48,45 +48,52 @@
4848
'8.1' => 'sameuser',
4949
default => undef,
5050
}
51-
postgresql::server::pg_hba_rule { 'local access as postgres user':
52-
type => 'local',
53-
user => $user,
54-
auth_method => 'ident',
55-
auth_option => $local_auth_option,
56-
order => 1,
57-
}
58-
postgresql::server::pg_hba_rule { 'local access to database with same name':
59-
type => 'local',
60-
auth_method => 'ident',
61-
auth_option => $local_auth_option,
62-
order => 2,
63-
}
64-
postgresql::server::pg_hba_rule { 'allow localhost TCP access to postgresql user':
65-
type => 'host',
66-
user => $user,
67-
address => '127.0.0.1/32',
68-
auth_method => 'md5',
69-
order => 3,
70-
}
71-
postgresql::server::pg_hba_rule { 'deny access to postgresql user':
72-
type => 'host',
73-
user => $user,
74-
address => $ip_mask_deny_postgres_user,
75-
auth_method => 'reject',
76-
order => 4,
77-
}
7851

79-
postgresql::server::pg_hba_rule { 'allow access to all users':
80-
type => 'host',
81-
address => $ip_mask_allow_all_users,
82-
auth_method => 'md5',
83-
order => 100,
84-
}
85-
postgresql::server::pg_hba_rule { 'allow access to ipv6 localhost':
86-
type => 'host',
87-
address => '::1/128',
88-
auth_method => 'md5',
89-
order => 101,
52+
postgresql::server::pg_hba_rule {
53+
'local access as postgres user':
54+
type => 'local',
55+
user => $user,
56+
auth_method => 'ident',
57+
auth_option => $local_auth_option,
58+
order => 1,
59+
;
60+
61+
'local access to database with same name':
62+
type => 'local',
63+
auth_method => 'ident',
64+
auth_option => $local_auth_option,
65+
order => 2,
66+
;
67+
68+
'allow localhost TCP access to postgresql user':
69+
type => 'host',
70+
user => $user,
71+
address => '127.0.0.1/32',
72+
auth_method => 'md5',
73+
order => 3,
74+
;
75+
76+
'deny access to postgresql user':
77+
type => 'host',
78+
user => $user,
79+
address => $ip_mask_deny_postgres_user,
80+
auth_method => 'reject',
81+
order => 4,
82+
;
83+
84+
'allow access to all users':
85+
type => 'host',
86+
address => $ip_mask_allow_all_users,
87+
auth_method => 'md5',
88+
order => 100,
89+
;
90+
91+
'allow access to ipv6 localhost':
92+
type => 'host',
93+
address => '::1/128',
94+
auth_method => 'md5',
95+
order => 101,
96+
;
9097
}
9198
}
9299

0 commit comments

Comments
 (0)