ssh-keygen on pg servers

[mirror/dsa-puppet.git] / modules / roles / manifests / postgresql_server.pp

diff --git a/modules/roles/manifests/postgresql_server.pp b/modules/roles/manifests/postgresql_server.pp
index e90c27e..3fbaa63 100644 (file)
--- a/modules/roles/manifests/postgresql_server.pp
+++ b/modules/roles/manifests/postgresql_server.pp
@@ -10,4 +10,11 @@ class roles::postgresql_server {
        file { "/etc/dsa/pg-backup-file.conf":
                content => template('roles/postgresql_server/pg-backup-file.conf.erb'),
        }
+
+       if ! $::postgresql_key {
+               exec { 'create-postgresql-key':
+                       command => '/bin/su - postgres -c \'mkdir -p -m 02700 .ssh && ssh-keygen -C "`whoami`@`hostname` (`date +%Y-%m-%d`)" -P "" -f .ssh/id_rsa -q\'',
+                       onlyif  => '/usr/bin/getent passwd postgres > /dev/null && ! [ -e /var/lib/postgresql/.ssh/id_rsa ]'
+               }
+       }
 }