Add actual postgresl module from puppetlabs

[mirror/dsa-puppet.git] / 3rdparty / modules / postgresql / manifests / config.pp

diff --git a/3rdparty/modules/postgresql/manifests/config.pp b/3rdparty/modules/postgresql/manifests/config.pp
new file mode 100644 (file)
index 0000000..9038052
--- /dev/null
+++ b/3rdparty/modules/postgresql/manifests/config.pp
@@ -0,0 +1,75 @@
+# Class: postgresql::config
+#
+# Parameters:
+#
+#   [*postgres_password*]            - postgres db user password.
+#   [*ip_mask_deny_postgres_user*]   - ip mask for denying remote access for postgres user; defaults to '0.0.0.0/0',
+#                                       meaning that all TCP access for postgres user is denied.
+#   [*ip_mask_allow_all_users*]      - ip mask for allowing remote access for other users (besides postgres);
+#                                       defaults to '127.0.0.1/32', meaning only allow connections from localhost
+#   [*listen_addresses*]             - what IP address(es) to listen on; comma-separated list of addresses; defaults to
+#                                       'localhost', '*' = all
+#   [*ipv4acls*]                     - list of strings for access control for connection method, users, databases, IPv4
+#                                       addresses; see postgresql documentation about pg_hba.conf for information
+#   [*ipv6acls*]                     - list of strings for access control for connection method, users, databases, IPv6
+#                                       addresses; see postgresql documentation about pg_hba.conf for information
+#   [*pg_hba_conf_path*]             - path to pg_hba.conf file
+#   [*postgresql_conf_path*]         - path to postgresql.conf file
+#   [*manage_redhat_firewall*]       - boolean indicating whether or not the module should open a port in the firewall on
+#                                       redhat-based systems; this parameter is likely to change in future versions.  Possible
+#                                       changes include support for non-RedHat systems and finer-grained control over the
+#                                       firewall rule (currently, it simply opens up the postgres port to all TCP connections).
+#   [*manage_pg_hba_conf*]      - boolean indicating whether or not the module manages pg_hba.conf file.
+#
+#
+# Actions:
+#
+# Requires:
+#
+# Usage:
+#
+#   class { 'postgresql::config':
+#     postgres_password         => 'postgres',
+#     ip_mask_allow_all_users   => '0.0.0.0/0',
+#   }
+#
+class postgresql::config(
+  $postgres_password          = undef,
+  $ip_mask_deny_postgres_user = $postgresql::params::ip_mask_deny_postgres_user,
+  $ip_mask_allow_all_users    = $postgresql::params::ip_mask_allow_all_users,
+  $listen_addresses           = $postgresql::params::listen_addresses,
+  $ipv4acls                   = $postgresql::params::ipv4acls,
+  $ipv6acls                   = $postgresql::params::ipv6acls,
+  $pg_hba_conf_path           = $postgresql::params::pg_hba_conf_path,
+  $postgresql_conf_path       = $postgresql::params::postgresql_conf_path,
+  $manage_redhat_firewall     = $postgresql::params::manage_redhat_firewall,
+  $manage_pg_hba_conf         = $postgresql::params::manage_pg_hba_conf
+) inherits postgresql::params {
+
+  # Basically, all this class needs to handle is passing parameters on
+  #  to the "beforeservice" and "afterservice" classes, and ensure
+  #  the proper ordering.
+
+  class { 'postgresql::config::beforeservice':
+    ip_mask_deny_postgres_user => $ip_mask_deny_postgres_user,
+    ip_mask_allow_all_users    => $ip_mask_allow_all_users,
+    listen_addresses           => $listen_addresses,
+    ipv4acls                   => $ipv4acls,
+    ipv6acls                   => $ipv6acls,
+    pg_hba_conf_path           => $pg_hba_conf_path,
+    postgresql_conf_path       => $postgresql_conf_path,
+    manage_redhat_firewall     => $manage_redhat_firewall,
+    manage_pg_hba_conf         => $manage_pg_hba_conf,
+  }
+
+  class { 'postgresql::config::afterservice':
+    postgres_password        => $postgres_password,
+  }
+
+  Class['postgresql::config'] ->
+      Class['postgresql::config::beforeservice'] ->
+      Service['postgresqld'] ->
+      Class['postgresql::config::afterservice']
+
+
+}