X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fpostgres%2Fmanifests%2Fcluster%2Fhba_entry.pp;h=6a7f7dc4bc735a8421c16c5e49384b71ef3527da;hb=1dee729d00307f93d600b5bb6902494bd30a4484;hp=843a4a780fa02dc9e73b10786fd99c15bf708fa5;hpb=6f0519ea008323e67f933fd1168c6c906f2c289d;p=mirror%2Fdsa-puppet.git

diff --git a/modules/postgres/manifests/cluster/hba_entry.pp b/modules/postgres/manifests/cluster/hba_entry.pp
index 843a4a780..6a7f7dc4b 100644
--- a/modules/postgres/manifests/cluster/hba_entry.pp
+++ b/modules/postgres/manifests/cluster/hba_entry.pp
@@ -6,6 +6,9 @@
 # See the upstream documentation at https://www.postgresql.org/docs/11/auth-pg-hba-conf.html
 # for details.
 #
+# Default order is 50, postgres::cluster puts the md5 localhost rules at 30,
+# so guest/trust access should probably go at 25.
+#
 # @param pg_port          port of the postgres cluster
 # @param pg_cluster       cluster name
 # @param pg_version       pg version of the cluster
@@ -20,7 +23,7 @@ define postgres::cluster::hba_entry (
   Optional[Integer] $pg_port = undef,
   Optional[String] $pg_cluster = undef,
   Optional[String] $pg_version = undef,
-  Enum['local', 'hostssl'] $connection_type = 'hostssl',
+  Enum['local', 'host', 'hostssl'] $connection_type = 'hostssl',
   Variant[String,Array[String]] $database = 'sameuser',
   Variant[String,Array[String]] $user = 'all',
   Optional[Variant[Stdlib::IP::Address, Array[Stdlib::IP::Address]]] $address = undef,