Skip to content

Commit cb57b32

Browse files
committed
Merge pull request puppetlabs#633 from b0e/master
disabling pg_hba_conf_defaults should not disable ipv4acls and ipv6ac…
2 parents 409907c + eec3c95 commit cb57b32

File tree

1 file changed

+13
-12
lines changed

1 file changed

+13
-12
lines changed

manifests/server/config.pp

Lines changed: 13 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -69,12 +69,6 @@
6969
order => '004',
7070
}
7171

72-
# ipv4acls are passed as an array of rule strings, here we transform
73-
# them into a resources hash, and pass the result to create_resources
74-
$ipv4acl_resources = postgresql_acls_to_resources_hash($ipv4acls,
75-
'ipv4acls', 10)
76-
create_resources('postgresql::server::pg_hba_rule', $ipv4acl_resources)
77-
7872
postgresql::server::pg_hba_rule { 'allow access to all users':
7973
type => 'host',
8074
address => $ip_mask_allow_all_users,
@@ -87,13 +81,20 @@
8781
auth_method => 'md5',
8882
order => '101',
8983
}
90-
91-
# ipv6acls are passed as an array of rule strings, here we transform
92-
# them into a resources hash, and pass the result to create_resources
93-
$ipv6acl_resources = postgresql_acls_to_resources_hash($ipv6acls,
94-
'ipv6acls', 102)
95-
create_resources('postgresql::server::pg_hba_rule', $ipv6acl_resources)
9684
}
85+
86+
# ipv4acls are passed as an array of rule strings, here we transform
87+
# them into a resources hash, and pass the result to create_resources
88+
$ipv4acl_resources = postgresql_acls_to_resources_hash($ipv4acls,
89+
'ipv4acls', 10)
90+
create_resources('postgresql::server::pg_hba_rule', $ipv4acl_resources)
91+
92+
93+
# ipv6acls are passed as an array of rule strings, here we transform
94+
# them into a resources hash, and pass the result to create_resources
95+
$ipv6acl_resources = postgresql_acls_to_resources_hash($ipv6acls,
96+
'ipv6acls', 102)
97+
create_resources('postgresql::server::pg_hba_rule', $ipv6acl_resources)
9798
}
9899

99100
# We must set a "listen_addresses" line in the postgresql.conf if we

0 commit comments

Comments
 (0)