This commit is contained in:
CroneKorkN 2025-06-22 17:22:36 +02:00
parent 782b11d9d1
commit 2bcdeb372e
Signed by: cronekorkn
SSH key fingerprint: SHA256:v0410ZKfuO1QHdgKBsdQNF64xmTxOF8osF1LIqwTcVw
4 changed files with 10 additions and 6 deletions

View file

@ -12,11 +12,11 @@ local all postgres peer
# "local" is for Unix domain socket connections only
local all all peer
# IPv4 local connections:
host all all 127.0.0.1/32 md5
host all all 127.0.0.1/32 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
# IPv6 local connections:
host all all ::1/128 md5
host all all ::1/128 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
# Allow replication connections from localhost, by a user with the
# replication privilege.
local replication all peer
host replication all 127.0.0.1/32 md5
host replication all ::1/128 md5
host replication all 127.0.0.1/32 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
host replication all ::1/128 ${node.metadata.get('postgresql/password_algorithm', 'md5')}

View file

@ -19,6 +19,7 @@ directories = {
files = {
f"/etc/postgresql/{version}/main/pg_hba.conf": {
'content_type': 'mako',
'mode': '0640',
'owner': 'postgres',
'group': 'postgres',

View file

@ -30,6 +30,9 @@
'gateway6': 'fe80::1',
},
},
'postgresql': {
'password_algorithm': 'scram-sha-256',
},
'freescout': {
'domain': 'foerderkreis.oranienschule-wiesbaden-wiki.de',
},

View file

@ -6,9 +6,9 @@
{
'hostname': '91.99.123.176',
'groups': [
#'backup',
'backup',
'debian-12',
#'monitored',
'monitored',
'webserver',
],
'bundles': [