--- /dev/null
+class { 'postgresql::server':
+ config_hash => {
+ 'ip_mask_deny_postgres_user' => '0.0.0.0/32',
+ 'ip_mask_allow_all_users' => '0.0.0.0/0',
+ 'listen_addresses' => '*',
+ 'ipv4acls' => ['hostssl all johndoe 192.168.0.0/24 cert'],
+ 'manage_redhat_firewall' => true,
+ 'postgres_password' => 'postgres',
+ },
+}