Move kaufmann keyserver fw into keyring role

[mirror/dsa-puppet.git] / modules / postgres / manifests / cluster / hba_entry.pp

diff --git a/modules/postgres/manifests/cluster/hba_entry.pp b/modules/postgres/manifests/cluster/hba_entry.pp
index 843a4a7..6a7f7dc 100644 (file)
--- a/modules/postgres/manifests/cluster/hba_entry.pp
+++ b/modules/postgres/manifests/cluster/hba_entry.pp
@@ -6,6 +6,9 @@
 # See the upstream documentation at https://www.postgresql.org/docs/11/auth-pg-hba-conf.html
 # for details.
 #
+# Default order is 50, postgres::cluster puts the md5 localhost rules at 30,
+# so guest/trust access should probably go at 25.
+#
 # @param pg_port          port of the postgres cluster
 # @param pg_cluster       cluster name
 # @param pg_version       pg version of the cluster
@@ -20,7 +23,7 @@ define postgres::cluster::hba_entry (
   Optional[Integer] $pg_port = undef,
   Optional[String] $pg_cluster = undef,
   Optional[String] $pg_version = undef,
-  Enum['local', 'hostssl'] $connection_type = 'hostssl',
+  Enum['local', 'host', 'hostssl'] $connection_type = 'hostssl',
   Variant[String,Array[String]] $database = 'sameuser',
   Variant[String,Array[String]] $user = 'all',
   Optional[Variant[Stdlib::IP::Address, Array[Stdlib::IP::Address]]] $address = undef,