From 06dbe8d59563733f800d9e1507b9e2174c6fed61 Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Fri, 31 Jul 2020 13:08:43 +0200 Subject: [PATCH] Remove the local ident authentication. --- tasks/configure-access.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tasks/configure-access.yml b/tasks/configure-access.yml index 962537a..90438ab 100644 --- a/tasks/configure-access.yml +++ b/tasks/configure-access.yml @@ -122,6 +122,11 @@ tags: [ 'postgresql', 'postgres', 'pg_hba', 'pg_db' ] # No conditionals, it is needed to perform base backups when the WAL archive is active + - name: Remove the ident authentication for the local connections + lineinfile: name={{ psql_el_conf_dir }}/pg_hba.conf regexp="^local.*?all.*?ident$" state=absent + notify: Reload postgresql + tags: [ 'postgresql', 'postgres', 'pg_hba', 'pg_db' ] + - name: Give local access with replication privileges to the postgres user lineinfile: name={{ psql_el_conf_dir }}/pg_hba.conf regexp="^local replication postgres peer" line="local replication postgres peer" notify: Reload postgresql