mirror of
https://github.com/zulip/zulip.git
synced 2025-11-09 08:26:11 +00:00
d905eb6131
Host-based md5 auth for 127.0.0.1 must be removed from `pg_hba.conf`, otherwise password authentication is preferred over certificate-based authentication for localhost.
30 lines
877 B
Puppet
30 lines
877 B
Puppet
# @summary Provide Teleport SSH access to a node.
|
|
#
|
|
# https://goteleport.com/docs/admin-guide/#adding-nodes-to-the-cluster
|
|
# details additional manual steps to allow a node to join the cluster.
|
|
class zulip_ops::teleport::db {
|
|
include zulip_ops::teleport::base
|
|
|
|
file { '/etc/teleport_db.yaml':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
content => template('zulip_ops/teleport_db.yaml.template.erb'),
|
|
}
|
|
|
|
file { "${zulip::common::supervisor_conf_dir}/teleport_db.conf":
|
|
ensure => file,
|
|
require => [
|
|
Package[supervisor],
|
|
Package[teleport],
|
|
File['/etc/teleport_db.yaml'],
|
|
],
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
source => 'puppet:///modules/zulip_ops/supervisor/conf.d/teleport_db.conf',
|
|
notify => Service[$zulip::common::supervisor_service],
|
|
}
|
|
}
|