Skip to content
Snippets Groups Projects
Commit 250e9e6a authored by Antoine SCHILDKNECHT's avatar Antoine SCHILDKNECHT
Browse files

Force SSL for DB communications | refs #35260

parent 3380b90e
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
roles/postgres-ha/tasks/main.yml
+ 8
− 8
View file @ 250e9e6a
......@@ -18,27 +18,27 @@
pg_hba:
- type: local
method: peer
- type: host
- type: hostssl
address: 127.0.0.1/32
- type: host
- type: hostssl
address: ::1/128
- type: host
- type: hostssl
address: 0.0.0.0/0
- type: host
- type: hostssl
address: ::/0
- type: local
database: replication
method: peer
- type: host
- type: hostssl
database: replication
address: 127.0.0.1/32
- type: host
- type: hostssl
database: replication
address: ::1/128
- type: host
- type: hostssl
database: replication
address: 0.0.0.0/0
- type: host
- type: hostssl
database: replication
address: ::/0
pg_conf:
......
roles/postgres/defaults/main.yml
+ 4
− 4
View file @ 250e9e6a
......@@ -18,17 +18,17 @@ pg_conf:
pg_hba:
- type: local
method: peer
- type: host
- type: hostssl
address: 127.0.0.1/32
- type: host
- type: hostssl
address: ::1/128
- type: local
database: replication
method: peer
- type: host
- type: hostssl
database: replication
address: 127.0.0.1/32
- type: host
- type: hostssl
database: replication
address: ::1/128
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment