summaryrefslogtreecommitdiffstats
path: root/roles/postgresql_server_bdr/templates
diff options
context:
space:
mode:
authorKevin Fenzi <kevin@scrye.com>2016-10-17 19:27:26 +0000
committerKevin Fenzi <kevin@scrye.com>2016-10-17 19:27:26 +0000
commitf653d285e3420c762c3cc90cf71bd577a46661b7 (patch)
tree8449398ff66a7eee5e49b4e1402f89ab4c8b8fc0 /roles/postgresql_server_bdr/templates
parenteb69def46c78cd41b6b657db793d061de965956d (diff)
downloadansible-f653d285e3420c762c3cc90cf71bd577a46661b7.tar.gz
ansible-f653d285e3420c762c3cc90cf71bd577a46661b7.tar.xz
ansible-f653d285e3420c762c3cc90cf71bd577a46661b7.zip
Fix mask
Diffstat (limited to 'roles/postgresql_server_bdr/templates')
-rw-r--r--roles/postgresql_server_bdr/templates/pg_hba.conf8
1 files changed, 4 insertions, 4 deletions
diff --git a/roles/postgresql_server_bdr/templates/pg_hba.conf b/roles/postgresql_server_bdr/templates/pg_hba.conf
index fb5cdfe1e..eb4f52df9 100644
--- a/roles/postgresql_server_bdr/templates/pg_hba.conf
+++ b/roles/postgresql_server_bdr/templates/pg_hba.conf
@@ -76,17 +76,17 @@ host all all 0.0.0.0 0.0.0.0 md5
# Note, I can't think of a reason to make this more restrictive than ipv4 but
# only fakefas needs it so far
host all all ::1/128 md5
-{% for host in groups['pgbdr-stg']|sort %}
# staging replication hosts
+{% for host in groups['pgbdr-stg']|sort %}
{% if 'eth0_ip' in hostvars[host] %}# {{ host }}
-host replication all {{ hostvars[host]['eth0_ip'] }} md5
+host replication all {{ hostvars[host]['eth0_ip'] }}/32 md5
{% else %}# {{ host }} has no 'eth0_ip' listed
{% endif %}
{% endfor %}
-{% for host in groups['pgbdr']|sort %}
# production replication hosts
+{% for host in groups['pgbdr']|sort %}
{% if 'eth0_ip' in hostvars[host] %}# {{ host }}
-host replication all {{ hostvars[host]['eth0_ip'] }} md5
+host replication all {{ hostvars[host]['eth0_ip'] }}/32 md5
{% else %}# {{ host }} has no 'eth0_ip' listed
{% endif %}
{% endfor %}