mode => '0400'
}
Concat::Fragment <<| tag == $postgres::backup_server::globals::tag_source_pgpassline |>>
-
- ####
- # Let us connect to the clusters we want
- #
- # We export this, and the backup clients collect it
- #
- # this rule is only needed for clusters that we do not manage
- # with postgres::cluster. Hopefully these will go away with time
- @@ferm::rule::simple { "pg-backup_server::${::fqdn}":
- tag => 'postgres::backup_server::to-client',
- description => 'Allow access access from backup host',
- chain => 'pg-backup',
- saddr => $base::public_addresses,
- }
}