Allow configuring hba, listen on all addresses

1 files changed, 11 insertions, 1 deletions

diff --git a/personal_infra/puppet/modules/postgres/manifests/init.pp b/personal_infra/puppet/modules/postgres/manifests/init.pp
index 5213db62..40fd5726 100644
--- a/personal_infra/puppet/modules/postgres/manifests/init.pp
+++ b/personal_infra/puppet/modules/postgres/manifests/init.pp
@@ -1,4 +1,4 @@
-class postgres {
+class postgres($pg_hba_conf) {
   package {'pgdg-redhat-repo':
     source => 'https://download.postgresql.org/pub/repos/yum/reporpms/EL-9-x86_64/pgdg-redhat-repo-latest.noarch.rpm',
   }
@@ -9,6 +9,16 @@ class postgres {
     creates => '/var/lib/pgsql/15/data/PG_VERSION',
   }
   ->
+  [
+    file {'/var/lib/pgsql/15/data/pg_hba.conf':
+      # template at /usr/pgsql-15/share/pg_hba.conf.sample
+      content => $pg_hba_conf,
+    },
+    exec {'/bin/sed -i "s/#listen_addresses = \'localhost\'/listen_addresses = \'*\'         /" /var/lib/pgsql/15/data/postgresql.conf':
+      unless => '/bin/grep "listen_addresses = \'\\*\'" /var/lib/pgsql/15/data/postgresql.conf',
+    }
+  ]
+  ~>
   service {'postgresql-15':
     ensure => running,
     enable => true,