This commit is contained in:
CroneKorkN 2025-06-22 17:22:36 +02:00
parent 782b11d9d1
commit 2bcdeb372e
Signed by: cronekorkn
SSH key fingerprint: SHA256:v0410ZKfuO1QHdgKBsdQNF64xmTxOF8osF1LIqwTcVw
4 changed files with 10 additions and 6 deletions

View file

@ -12,11 +12,11 @@ local all postgres peer
# "local" is for Unix domain socket connections only # "local" is for Unix domain socket connections only
local all all peer local all all peer
# IPv4 local connections: # IPv4 local connections:
host all all 127.0.0.1/32 md5 host all all 127.0.0.1/32 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
# IPv6 local connections: # IPv6 local connections:
host all all ::1/128 md5 host all all ::1/128 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
# Allow replication connections from localhost, by a user with the # Allow replication connections from localhost, by a user with the
# replication privilege. # replication privilege.
local replication all peer local replication all peer
host replication all 127.0.0.1/32 md5 host replication all 127.0.0.1/32 ${node.metadata.get('postgresql/password_algorithm', 'md5')}
host replication all ::1/128 md5 host replication all ::1/128 ${node.metadata.get('postgresql/password_algorithm', 'md5')}

View file

@ -19,6 +19,7 @@ directories = {
files = { files = {
f"/etc/postgresql/{version}/main/pg_hba.conf": { f"/etc/postgresql/{version}/main/pg_hba.conf": {
'content_type': 'mako',
'mode': '0640', 'mode': '0640',
'owner': 'postgres', 'owner': 'postgres',
'group': 'postgres', 'group': 'postgres',

View file

@ -30,6 +30,9 @@
'gateway6': 'fe80::1', 'gateway6': 'fe80::1',
}, },
}, },
'postgresql': {
'password_algorithm': 'scram-sha-256',
},
'freescout': { 'freescout': {
'domain': 'foerderkreis.oranienschule-wiesbaden-wiki.de', 'domain': 'foerderkreis.oranienschule-wiesbaden-wiki.de',
}, },

View file

@ -6,9 +6,9 @@
{ {
'hostname': '91.99.123.176', 'hostname': '91.99.123.176',
'groups': [ 'groups': [
#'backup', 'backup',
'debian-12', 'debian-12',
#'monitored', 'monitored',
'webserver', 'webserver',
], ],
'bundles': [ 'bundles': [