move director db pw to a more local thing

[mirror/dsa-puppet.git] / modules / bacula / manifests / director.pp

diff --git a/modules/bacula/manifests/director.pp b/modules/bacula/manifests/director.pp
index 5aaa061..ff41e1b 100644 (file)
--- a/modules/bacula/manifests/director.pp
+++ b/modules/bacula/manifests/director.pp
@@ -5,6 +5,7 @@
 # @param db_port        port of the postgres server for the catalog DB
 # @param db_name        DB name for the catalog DB
 # @param db_user        username for the postgres server for the catalog DB
+# @param db_password    password for the postgres server for the catalog DB
 # @param port_dir       Port that the director should listen on
 # @param db_sslca       SSL CA store for DB access
 # @param director_name  bacula name of this dir instance
@@ -14,6 +15,7 @@ class bacula::director(
   Integer $db_port,
   String  $db_name = 'bacula',
   String  $db_user = 'bacula',
+  String  $db_password = hkdf('/etc/puppet/secret', "bacula-db-${::hostname}"),
   String  $pool_name = 'bacula',
   Integer $port_dir = 9101,
   Optional[String] $db_sslca = undef,