guest access for dak on ftp-master

[mirror/dsa-puppet.git] / modules / roles / manifests / ftp_master.pp

diff --git a/modules/roles/manifests/ftp_master.pp b/modules/roles/manifests/ftp_master.pp
index 7b3053a..b95330c 100644 (file)
--- a/modules/roles/manifests/ftp_master.pp
+++ b/modules/roles/manifests/ftp_master.pp
@@ -1,4 +1,10 @@
-class roles::ftp_master {
+# ftpmaster role
+#
+# @param db_port    port of the database cluster for ftp-master's dak
+class roles::ftp_master (
+  Integer $db_port,
+)
+{
   include roles::dakmaster
   include roles::signing
   include apache2
@@ -23,4 +29,13 @@ class roles::ftp_master {
     chain       => 'ssh',
     saddr       => $base::public_addresses,
   }
+
+  postgres::cluster::hba_entry { 'dak-guest':
+    pg_port  => $db_port,
+    database => 'projectb',
+    user     => 'guest',
+    address  => '127.0.0.1',
+    method   => 'trust',
+  }
+
 }