+
+ postgres::cluster::hba_entry { 'snapshot-guest':
+ pg_port => $db_port,
+ database => 'snapshot',
+ user => 'guest',
+ address => $guest_addresses,
+ method => 'trust',
+ order => '20',
+ }
+
+ if $upstream_db_server {
+ if !$upstream_db_port {
+ fail ('Also need a port if we have a upstream_db_server')
+ }
+ @@postgres::cluster::hba_entry { "snapshot-replica-to-${::fqdn}":
+ tag => "postgres::cluster::${upstream_db_port}::hba::${upstream_db_server}",
+ pg_port => $upstream_db_port,
+ database => 'replication',
+ user => $upstream_db_role,
+ address => $base::public_addresses,
+ }
+ }