X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Fmanifests%2Ftracker.pp;h=d29655f7a190b2502ff9ef5aaf0f92ac8b593bff;hb=HEAD;hp=e2ed25056a48cfbc92f06a27935ebc4b16726b1e;hpb=bf716a4daf9652bc9d1b77deac83a2b384fd78bc;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/manifests/tracker.pp b/modules/roles/manifests/tracker.pp
index e2ed25056..d29655f7a 100644
--- a/modules/roles/manifests/tracker.pp
+++ b/modules/roles/manifests/tracker.pp
@@ -1,4 +1,11 @@
-class roles::tracker {
+# tracker.debian.org service
+#
+# @param db_address     hostname of the postgres server for this service
+# @param db_port        port of the postgres server for this service
+class roles::tracker (
+  String  $db_address,
+  Integer $db_port,
+) {
   include apache2
   include roles::sso_rp
 
@@ -13,8 +20,17 @@ class roles::tracker {
   # tell the mail-relays to forward this domain to us
   exim::manualroute{ 'tracker.debian.org': }
   # and then handle it locally
+  # Note that there is also role specific config in exim4.conf
   exim::vdomain { 'tracker.debian.org':
     owner => 'qa',
     group => 'qa',
   }
+
+  @@postgres::cluster::hba_entry { "tracker-${::fqdn}":
+    tag      => "postgres::cluster::${db_port}::hba::${db_address}",
+    pg_port  => $db_port,
+    database => ['tracker', 'tracker-test'],
+    user     => 'qa',
+    address  => $base::public_addresses,
+  }
 }