manage pg_hba.conf

cloverfeed · Oct 27, 2014 · d9b78a3 · d9b78a3
1 parent b08e4b1
commit d9b78a3
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/devops/deploy.yml b/devops/deploy.yml
@@ -62,6 +62,14 @@
       sudo_user: postgres
       postgresql_user: name={{dbuser}} role_attr_flags=NOSUPERUSER,NOCREATEDB
 
+    - name: configure postgres auth
+      action: template
+      args:
+          src: templates/pg_hba.conf
+          dest: /etc/postgresql/9.4/main/pg_hba.conf
+      notify:
+        - restart postgres
+
     - name: run DB migrations
       action: command env VIRTUAL_ENV={{webapps_dir}}/{{app_name}}/venv {{webapps_dir}}/{{app_name}}/venv/bin/python {{webapps_dir}}/{{app_name}}/src/manage.py db upgrade
       args:
@@ -108,3 +116,6 @@
 
     - name: restart nginx
       action: service name=nginx state=restarted
+
+    - name: restart postgres
+      action: service name=postgresql state=restarted
diff --git a/devops/templates/pg_hba.conf b/devops/templates/pg_hba.conf
@@ -0,0 +1,8 @@
+# Database administrative login by Unix domain socket
+local   all             postgres                                peer
+
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+local   {{dbname}}      {{dbuser}}                              trust
+
+# "local" is for Unix domain socket connections only
+local   all             all                                     peer