#!/bin/bash -e

sudo su - postgres
createdb testdb

psql -s tm351test -c "create user test password 'test';GRANT ALL PRIVILEGES ON DATABASE testdb TO test;"

touch /root/postgresql.done

package {
  [
    'postgresql',
    'postgresql-client'
  ]: ensure => latest;
}

file {
  '/root/postgresql.setup':
    source => 'puppet:///modules/infinite_interns/root/postgresql.setup',
    owner  => root,
    group  => root,
    mode   => '0744';
}

#TO DO - how do we guarantee the postgresql server is running and tools available?
exec {
  'setup-postgresql':
    cwd     => '/root',
    command => '/root/postgresql.setup',
    creates => '/root/postgresql.done';
}

service {
  'postgresql':
    ensure => running,
    enable => true;
}

Package['postgresql'] -> Service['postgresql']

puppet module install puppetlabs-postgresql

mod 'puppetlabs-postgresql'

class { 'postgresql::globals':
    encoding => 'UTF-8',
    locale   => 'en_US.UTF-8',
    version  => '9.6',
  }->
  class { 'postgresql::server':
    ip_mask_deny_postgres_user => '0.0.0.0/32',
    ip_mask_allow_all_users    => '0.0.0.0/0',
    listen_addresses           => '*',
    version                    => '9.6',
  }

  postgresql::server::db { 'testdb':
    user     => 'test',
    password => postgresql_password('test', 'testpassword'),
  }

  postgresql::server::pg_hba_rule { 'allow connection from ...':
    description => "Open up PostgreSQL for access from test domain",
    type        => 'host',
    database    => 'testdb',
    user        => 'test',
    address     => '.testdomain.com',
    auth_method => 'md5',
  }