move localhost guest access in front of catch-all localhost access

[mirror/dsa-puppet.git] / modules / postgres / manifests / cluster.pp

diff --git a/modules/postgres/manifests/cluster.pp b/modules/postgres/manifests/cluster.pp
index 92f87d1..1f639cd 100644 (file)
--- a/modules/postgres/manifests/cluster.pp
+++ b/modules/postgres/manifests/cluster.pp
@@ -86,6 +86,14 @@ define postgres::cluster(
       order   => '00',
       content => template('postgres/cluster/pg_hba.conf-head.erb'),
     }
+    postgres::cluster::hba_entry { 'local-connections':
+      pg_port  => $real_port,
+      database => 'all',
+      user     => 'all',
+      address  => ['127.0.0.1', '::1'],
+      order    => '30',
+      firewall => false,
+    }
     Concat::Fragment <| tag == "postgres::cluster::${real_version}::${real_cluster}::hba" |>
   }
 }