Adding postgres user to sto-tug-kvm2.sunet-ops-2015-03-31-v11

1 files changed, 13 insertions, 1 deletions

diff --git a/global/overlay/etc/puppet/manifests/cosmos-site.pp b/global/overlay/etc/puppet/manifests/cosmos-site.pp
index 2c2eb32..3f2c9af 100644
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@@ -697,12 +697,24 @@ node 'cdr1.sunet.se' {
 }
 
 node 'sto-tug-kvm2.swamid.se' {
-    #class { 'fail2ban': }
+   #class { 'fail2ban': }
+   sunet::system_user {'postgres-system-user':
+       username => 'postgres',
+       group    => 'postgres',
+   } ->
+   sunet::add_user_to_group { 'postgres_ssl_cert_access':
+       username => 'postgres',
+       group    => 'ssl-cert',
+   } ->
    file {'/opt/docker/postgresql_data':
        ensure => 'directory',
+       owner  => 'postgres',
+       group  => 'postgres',
    } ->
    file {'/var/log/flog_db':
       ensure => 'directory',
+      owner  => 'postgres',
+      group  => 'postgres',
    } ->
    sunet::docker_run {'flog_db':
       image    => 'docker.sunet.se/flog/postgresql-9.3',