freighthop 0.0.6 → 0.1.0

data/modules/postgresql/manifests/params.pp

@@ -1,245 +1,150 @@
-# Class: postgresql::params
-#
-#   The postgresql configuration settings.
-#
-# Parameters:
-#
-# Actions:
-#
-# Requires:
-#
-# Sample Usage:
-#
-
-# TODO: add real docs
-
-# This class allows you to use a newer version of postgres, rather than your
-# system's default version.
-#
-# If you want to do that, note that it is important that you use the '->',
-# or a before/require metaparameter to make sure that the `params`
-# class is evaluated before any of the other classes in the module.
-#
-# Also note that this class includes the ability to automatically manage
-# the yumrepo resource.  If you'd prefer to manage the repo yourself, simply pass
-# 'false' or omit the 'manage_repo' parameter--it defaults to 'false'.  You will
-# still need to use the 'params' class to specify the postgres version
-# number, though, in order for the other classes to be able to find the
-# correct paths to the postgres dirs.
-
-class postgresql::params(
-  $version                     = $::postgres_default_version,
-  $manage_package_repo         = false,
-  $package_source              = undef,
-  $locale                      = undef,
-  $charset                     = 'UTF8',
-  $custom_datadir              = undef,
-  $custom_confdir              = undef,
-  $custom_bindir               = undef,
-  $custom_client_package_name  = undef,
-  $custom_server_package_name  = undef,
-  $custom_contrib_package_name = undef,
-  $custom_devel_package_name   = undef,
-  $custom_java_package_name    = undef,
-  $custom_plperl_package_name  = undef,
-  $custom_service_name         = undef,
-  $custom_user                 = undef,
-  $custom_group                = undef,
-  $run_initdb                  = undef
-) {
-  $user                         = pick($custom_user, 'postgres')
-  $group                        = pick($custom_group, 'postgres')
-  $ip_mask_deny_postgres_user   = '0.0.0.0/0'
-  $ip_mask_allow_all_users      = '127.0.0.1/32'
-  $listen_addresses             = 'localhost'
-  $ipv4acls                     = []
-  $ipv6acls                     = []
-  $manage_pg_hba_conf           = true
-  # TODO: figure out a way to make this not platform-specific
-  $manage_redhat_firewall       = false
-
-  if ($manage_package_repo) {
-    case $::osfamily {
-      'RedHat': {
-        $rh_pkg_source = pick($package_source, 'yum.postgresql.org')
-
-        case $rh_pkg_source {
-          'yum.postgresql.org': {
-            class { 'postgresql::package_source::yum_postgresql_org':
-              version => $version
-            }
-          }
-
-          default: {
-            fail("Unsupported package source '${rh_pkg_source}' for ${::osfamily} OS family. Currently the only supported source is 'yum.postgresql.org'")
-          }
-        }
-      }
-
-      'Debian': {
-        class { 'postgresql::package_source::apt_postgresql_org': }
-      }
-
-      default: {
-        fail("Unsupported osfamily for manage_package_repo: ${::osfamily} operatingsystem: ${::operatingsystem}, module ${module_name} currently only supports managing repos for osfamily RedHat and Debian")
-      }
-    }
-  }
-
-
-  # This is a bit hacky, but if the puppet nodes don't have pluginsync enabled,
-  # they will fail with a not-so-helpful error message.  Here we are explicitly
-  # verifying that the custom fact exists (which implies that pluginsync is
-  # enabled and succeeded).  If not, we fail with a hint that tells the user
-  # that pluginsync might not be enabled.  Ideally this would be handled directly
-  # in puppet.
-  if ($::postgres_default_version == undef) {
-    fail('No value for postgres_default_version facter fact; it\'s possible that you don\'t have pluginsync enabled.')
-  }
-
-  case $::operatingsystem {
-    default: {
-      $service_provider = undef
-    }
-  }
+# PRIVATE CLASS: do not use directly
+class postgresql::params inherits postgresql::globals {
+  $ensure                     = true
+  $version                    = $globals_version
+  $listen_addresses           = 'localhost'
+  $ip_mask_deny_postgres_user = '0.0.0.0/0'
+  $ip_mask_allow_all_users    = '127.0.0.1/32'
+  $ipv4acls                   = []
+  $ipv6acls                   = []
+  $user                       = pick($user, 'postgres')
+  $group                      = pick($group, 'postgres')
+  $encoding                   = $encoding
+  $locale                     = $locale
+  $service_provider           = $service_provider
+  $manage_firewall            = $manage_firewall
+  $manage_pg_hba_conf         = pick($manage_pg_hba_conf, true)
 
   # Amazon Linux's OS Family is 'Linux', operating system 'Amazon'.
   case $::osfamily {
     'RedHat', 'Linux': {
-      $needs_initdb             = pick($run_initdb, true)
-      $firewall_supported       = true
-      $persist_firewall_command = '/sbin/iptables-save > /etc/sysconfig/iptables'
-
-      if $version == $::postgres_default_version {
-        $client_package_name    = pick($custom_client_package_name, 'postgresql')
-        $server_package_name    = pick($custom_server_package_name, 'postgresql-server')
-        $contrib_package_name   = pick($custom_contrib_package_name,'postgresql-contrib')
-        $devel_package_name     = pick($custom_devel_package_name, 'postgresql-devel')
-        $java_package_name      = pick($custom_java_package_name, 'postgresql-jdbc')
-        $plperl_package_name    = pick($custom_plperl_package_name, 'postgresql-plperl')
-        $service_name           = pick($custom_service_name, 'postgresql')
-        $bindir                 = pick($custom_bindir, '/usr/bin')
-        $datadir                = pick($custom_datadir, '/var/lib/pgsql/data')
-        $confdir                = pick($custom_confdir, $datadir)
+      $needs_initdb       = pick($needs_initdb, true)
+      $firewall_supported = pick($firewall_supported, true)
+
+      if $version == $default_version {
+        $client_package_name  = pick($client_package_name, 'postgresql')
+        $server_package_name  = pick($server_package_name, 'postgresql-server')
+        $contrib_package_name = pick($contrib_package_name,'postgresql-contrib')
+        $devel_package_name   = pick($devel_package_name, 'postgresql-devel')
+        $java_package_name    = pick($java_package_name, 'postgresql-jdbc')
+        $plperl_package_name  = pick($plperl_package_name, 'postgresql-plperl')
+        $service_name         = pick($service_name, 'postgresql')
+        $bindir               = pick($bindir, '/usr/bin')
+        $datadir              = $::operatingsystem ? {
+          'Amazon' => pick($datadir, '/var/lib/pgsql9/data'),
+          default  => pick($datadir, '/var/lib/pgsql/data'),
+        }
+        $confdir              = pick($confdir, $datadir)
       } else {
-        $version_parts          = split($version, '[.]')
-        $package_version        = "${version_parts[0]}${version_parts[1]}"
-        $client_package_name    = pick($custom_client_package_name, "postgresql${package_version}")
-        $server_package_name    = pick($custom_server_package_name, "postgresql${package_version}-server")
-        $contrib_package_name   = pick($custom_contrib_package_name,"postgresql${package_version}-contrib")
-        $devel_package_name     = pick($custom_devel_package_name, "postgresql${package_version}-devel")
-        $java_package_name      = pick($custom_java_package_name, "postgresql${package_version}-jdbc")
-        $plperl_package_name    = pick($custom_plperl_package_name, "postgresql${package_version}-plperl")
-        $service_name           = pick($custom_service_name, "postgresql-${version}")
-        $bindir                 = pick($custom_bindir, "/usr/pgsql-${version}/bin")
-        $datadir                = pick($custom_datadir, "/var/lib/pgsql/${version}/data")
-        $confdir                = pick($custom_confdir, $datadir)
+        $version_parts        = split($version, '[.]')
+        $package_version      = "${version_parts[0]}${version_parts[1]}"
+        $client_package_name  = pick($client_package_name, "postgresql${package_version}")
+        $server_package_name  = pick($server_package_name, "postgresql${package_version}-server")
+        $contrib_package_name = pick($contrib_package_name,"postgresql${package_version}-contrib")
+        $devel_package_name   = pick($devel_package_name, "postgresql${package_version}-devel")
+        $java_package_name    = pick($java_package_name, "postgresql${package_version}-jdbc")
+        $plperl_package_name  = pick($plperl_package_name, "postgresql${package_version}-plperl")
+        $service_name         = pick($service_name, "postgresql-${version}")
+        $bindir               = pick($bindir, "/usr/pgsql-${version}/bin")
+        $datadir              = $::operatingsystem ? {
+          'Amazon' => pick($datadir, "/var/lib/pgsql9/${version}/data"),
+          default  => pick($datadir, "/var/lib/pgsql/${version}/data"),
+        }
+        $confdir              = pick($confdir, $datadir)
       }
+      $psql_path            = pick($psql_path, "${bindir}/psql")
 
-      $service_status      = undef
-      $python_package_name = 'python-psycopg2'
+      $service_status      = $service_status
+      $python_package_name = pick($python_package_name, 'python-psycopg2')
+    }
+
+    'Archlinux': {
+      # Based on the existing version of the firewall module, this is normally
+      # true for Archlinux, but archlinux users want more control.
+      # so they can set it themself
+      $firewall_supported = pick($firewall_supported, true)
+      $needs_initdb       = pick($needs_initdb, true)
+
+      # Archlinux doesn't have a client-package but has a libs package which
+      # pulls in postgresql server
+      $client_package_name  = pick($client_package_name, 'postgresql')
+      $server_package_name  = pick($server_package_name, 'postgresql-libs')
+      $java_package_name    = pick($java_package_name, 'postgresql-jdbc')
+      # Archlinux doesn't have develop packages
+      $devel_package_name   = pick($devel_package_name, 'postgresql-devel')
+      # Archlinux does have postgresql-contrib but it isn't maintained
+      $contrib_package_name = pick($contrib_package_name,'undef')
+      # Archlinux postgresql package provides plperl
+      $plperl_package_name  = pick($plperl_package_name, 'undef')
+      $service_name         = pick($service_name, 'postgresql')
+      $bindir               = pick($bindir, '/usr/bin')
+      $datadir              = pick($datadir, '/var/lib/postgres/data')
+      $confdir              = pick($confdir, $datadir)
+      $psql_path            = pick($psql_path, "${bindir}/psql")
+
+      $service_status      = $service_status
+      $python_package_name = pick($python_package_name, 'python-psycopg2')
     }
 
     'Debian': {
-      $firewall_supported       = false
-      # TODO: not exactly sure yet what the right thing to do for Debian/Ubuntu is.
-      #$persist_firewall_command = '/sbin/iptables-save > /etc/iptables/rules.v4'
 
       if $manage_package_repo == true {
-        $needs_initdb = pick($run_initdb, true)
-        $service_name = pick($custom_service_name, 'postgresql')
+        $needs_initdb = pick($needs_initdb, true)
+        $service_name = pick($service_name, 'postgresql')
       } else {
-        $needs_initdb = pick($run_initdb, false)
-        case $::operatingsystem {
-          'Debian': {
-            $service_name = pick($custom_service_name, 'postgresql')
-          }
-          'Ubuntu': {
-            # thanks, ubuntu
-            if($::lsbmajdistrelease == '10') {
-              $service_name = pick($custom_service_name, "postgresql-${version}")
-            } else {
-              $service_name = pick($custom_service_name, 'postgresql')
-            }
-          }
-          default: { }
+        $needs_initdb = pick($needs_initdb, false)
+        $service_name = $::operatingsystem ? {
+          'Debian' => pick($service_name, 'postgresql'),
+          'Ubuntu' => $::lsbmajdistrelease ? {
+            '10' => pick($service_name, "postgresql-${version}"),
+            default => pick($service_name, 'postgresql'),
+          },
+          default => undef
         }
       }
 
-      $client_package_name  = pick($custom_client_package_name, "postgresql-client-${version}")
-      $server_package_name  = pick($custom_server_package_name, "postgresql-${version}")
-      $contrib_package_name = pick($custom_contrib_package_name, "postgresql-contrib-${version}")
-      $devel_package_name   = pick($custom_devel_package_name, 'libpq-dev')
-      $java_package_name    = pick($custom_java_package_name, 'libpostgresql-jdbc-java')
-      $bindir               = pick($custom_bindir, "/usr/lib/postgresql/${version}/bin")
-      $datadir              = pick($custom_datadir, "/var/lib/postgresql/${version}/main")
-      $confdir              = pick($custom_confdir, "/etc/postgresql/${version}/main")
-      $service_status       = "/etc/init.d/${service_name} status | /bin/egrep -q 'Running clusters: .+|online'"
-      $python_package_name  = 'python-psycopg2'
-      $plperl_package_name  = "postgresql-plperl-${version}"
+      $client_package_name  = pick($client_package_name, "postgresql-client-${version}")
+      $server_package_name  = pick($server_package_name, "postgresql-${version}")
+      $contrib_package_name = pick($contrib_package_name, "postgresql-contrib-${version}")
+      $devel_package_name   = pick($devel_package_name, 'libpq-dev')
+      $java_package_name    = pick($java_package_name, 'libpostgresql-jdbc-java')
+      $plperl_package_name  = pick($plperl_package_name, "postgresql-plperl-${version}")
+      $python_package_name  = pick($python_package_name, 'python-psycopg2')
+
+      $bindir               = pick($bindir, "/usr/lib/postgresql/${version}/bin")
+      $datadir              = pick($datadir, "/var/lib/postgresql/${version}/main")
+      $confdir              = pick($confdir, "/etc/postgresql/${version}/main")
+      $service_status       = pick($service_status, "/etc/init.d/${service_name} status | /bin/egrep -q 'Running clusters: .+|online'")
+      $psql_path            = pick($psql_path, "/usr/bin/psql")
+
+      $firewall_supported   = pick($firewall_supported, true)
     }
 
     default: {
-
-      $err_msg_prefix = "Module ${module_name} does not provide defaults for osfamily: ${::osfamily} operatingsystem: ${::operatingsystem}; please specify a value for ${module_name}::params::"
-
-      if ($run_initdb != undef) {
-        $needs_initdb = $run_initdb
-      } else {
-        fail("${err_msg_prefix}run_initdb")
-      }
-
-      $firewall_supported = false
-
-      if ($custom_service_name) {
-        $service_name = $custom_service_name
-      } else {
-        fail("${err_msg_prefix}custom_service_name")
-      }
-
-      if ($custom_client_package_name) {
-        $client_package_name = $custom_client_package_name
-      } else {
-        fail("${err_msg_prefix}custom_client_package_name")
-      }
-
-      if ($custom_server_package_name) {
-        $server_package_name = $custom_server_package_name
-      } else {
-        fail("${err_msg_prefix}custom_server_package_name")
-      }
-
-
-      $contrib_package_name = $custom_contrib_package_name
-      $devel_package_name   = $custom_devel_package_name
-      $java_package_name    = $custom_java_package_name
-
-      if ($custom_bindir) {
-        $bindir = $custom_bindir
-      } else {
-        fail("${err_msg_prefix}custom_bindir")
-      }
-
-      if ($custom_datadir) {
-        $datadir = $custom_datadir
-      } else {
-        fail("${err_msg_prefix}custom_datadir")
-      }
-
-      if ($custom_confdir) {
-        $confdir = $custom_confdir
-      } else {
-        fail("${err_msg_prefix}custom_confdir")
-      }
-
-      $service_status = undef
+      # Based on the existing version of the firewall module, this is normally
+      # false for other OS, but this allows an escape hatch to override it.
+      $firewall_supported = pick($firewall_supported, false)
+
+      $psql_path            = pick($psql_path, "${bindir}/psql")
+
+      # Since we can't determine defaults on our own, we rely on users setting
+      # parameters with the postgresql::globals class. Here we are checking
+      # that the mandatory minimum is set for the module to operate.
+      $err_prefix = "Module ${module_name} does not provide defaults for osfamily: ${::osfamily} operatingsystem: ${::operatingsystem}; please specify a value for ${module_name}::globals::"
+      if ($needs_initdb == undef) { fail("${err_prefix}needs_initdb") }
+      if ($service_name == undef) { fail("${err_prefix}service_name") }
+      if ($client_package_name == undef) { fail("${err_prefix}client_package_name") }
+      if ($server_package_name == undef) { fail("${err_prefix}server_package_name") }
+      if ($bindir == undef) { fail("${err_prefix}bindir") }
+      if ($datadir == undef) { fail("${err_prefix}datadir") }
+      if ($confdir == undef) { fail("${err_prefix}confdir") }
     }
   }
 
-  $initdb_path          = "${bindir}/initdb"
-  $createdb_path        = "${bindir}/createdb"
-  $psql_path            = "${bindir}/psql"
-  $pg_hba_conf_path     = "${confdir}/pg_hba.conf"
-  $postgresql_conf_path = "${confdir}/postgresql.conf"
-
+  $initdb_path          = pick($initdb_path, "${bindir}/initdb")
+  $createdb_path        = pick($createdb_path, "${bindir}/createdb")
+  $pg_hba_conf_path     = pick($pg_hba_conf_path, "${confdir}/pg_hba.conf")
+  $pg_hba_conf_defaults = pick($pg_hba_conf_defaults, true)
+  $postgresql_conf_path = pick($postgresql_conf_path, "${confdir}/postgresql.conf")
+  $default_database     = pick($default_database, 'postgres')
 }

data/modules/postgresql/manifests/repo/apt_postgresql_org.pp

@@ -0,0 +1,30 @@
+# PRIVATE CLASS: do not use directly
+class postgresql::repo::apt_postgresql_org inherits postgresql::repo {
+  if($ensure == 'present' or $ensure == true) {
+    # Here we have tried to replicate the instructions on the PostgreSQL site:
+    #
+    # http://www.postgresql.org/download/linux/debian/
+    #
+    apt::pin { 'apt.postgresql.org':
+      originator => 'apt.postgresql.org',
+      priority   => 500,
+    }->
+    apt::source { 'apt.postgresql.org':
+      location          => 'http://apt.postgresql.org/pub/repos/apt/',
+      release           => "${::lsbdistcodename}-pgdg",
+      repos             => "main ${version}",
+      key               => 'ACCC4CF8',
+      key_source        => 'http://apt.postgresql.org/pub/repos/apt/ACCC4CF8.asc',
+      include_src       => false,
+    }
+
+    Apt::Source['apt.postgresql.org']->Package<|tag == 'postgresql'|>
+  } else {
+    apt::source { 'apt.postgresql.org':
+      ensure => absent,
+    }
+    apt::pin { 'apt.postgresql.org':
+      ensure => absent,
+    }
+  }
+}

data/modules/postgresql/manifests/repo/yum_postgresql_org.pp

@@ -0,0 +1,38 @@
+# PRIVATE CLASS: do not use directly
+class postgresql::repo::yum_postgresql_org inherits postgresql::repo {
+  $version_parts   = split($version, '[.]')
+  $package_version = "${version_parts[0]}${version_parts[1]}"
+  $gpg_key_path    = "/etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-${package_version}"
+
+  if ($ensure == 'present' or $ensure == true) {
+    file { $gpg_key_path:
+      source => 'puppet:///modules/postgresql/RPM-GPG-KEY-PGDG',
+      before => Yumrepo['yum.postgresql.org']
+    }
+
+    if($::operatingsystem == 'Fedora') {
+      $label1 = 'fedora'
+      $label2 = $label1
+    } else {
+      $label1 = 'redhat'
+      $label2 = 'rhel'
+    }
+
+    yumrepo { 'yum.postgresql.org':
+      descr    => "PostgreSQL ${version} \$releasever - \$basearch",
+      baseurl  => "http://yum.postgresql.org/${version}/${label1}/${label2}-\$releasever-\$basearch",
+      enabled  => 1,
+      gpgcheck => 1,
+      gpgkey   => "file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG-${package_version}",
+    }
+
+    Yumrepo['yum.postgresql.org'] -> Package<|tag == 'postgresql'|>
+  } else {
+    yumrepo { 'yum.postgresql.org':
+      enabled => absent,
+    }->
+    file { $gpg_key_path:
+      ensure => absent,
+    }
+  }
+}

data/modules/postgresql/manifests/repo.pp

@@ -0,0 +1,22 @@
+# PRIVATE CLASS: do not use directly
+class postgresql::repo (
+  $ensure  = $postgresql::params::ensure,
+  $version = undef
+) inherits postgresql::params {
+  case $::osfamily {
+    'RedHat', 'Linux': {
+      if $version == undef {
+        fail("The parameter 'version' for 'postgresql::repo' is undefined. You must always define it when osfamily == Redhat or Linux")
+      }
+      class { 'postgresql::repo::yum_postgresql_org': }
+    }
+
+    'Debian': {
+      class { 'postgresql::repo::apt_postgresql_org': }
+    }
+
+    default: {
+      fail("Unsupported managed repository for osfamily: ${::osfamily}, operatingsystem: ${::operatingsystem}, module ${module_name} currently only supports managing repos for osfamily RedHat and Debian")
+    }
+  }
+}

data/modules/postgresql/manifests/server/config.pp

@@ -0,0 +1,113 @@
+# PRIVATE CLASS: do not call directly
+class postgresql::server::config {
+  $ensure                     = $postgresql::server::ensure
+  $ip_mask_deny_postgres_user = $postgresql::server::ip_mask_deny_postgres_user
+  $ip_mask_allow_all_users    = $postgresql::server::ip_mask_allow_all_users
+  $listen_addresses           = $postgresql::server::listen_addresses
+  $ipv4acls                   = $postgresql::server::ipv4acls
+  $ipv6acls                   = $postgresql::server::ipv6acls
+  $pg_hba_conf_path           = $postgresql::server::pg_hba_conf_path
+  $postgresql_conf_path       = $postgresql::server::postgresql_conf_path
+  $pg_hba_conf_defaults       = $postgresql::server::pg_hba_conf_defaults
+  $user                       = $postgresql::server::user
+  $group                      = $postgresql::server::group
+  $version                    = $postgresql::server::version
+  $manage_pg_hba_conf         = $postgresql::server::manage_pg_hba_conf
+
+  File {
+    owner => $user,
+    group => $group,
+  }
+
+  if ($ensure == 'present' or $ensure == true) {
+
+    if ($manage_pg_hba_conf == true) {
+      # Prepare the main pg_hba file
+      concat { $pg_hba_conf_path:
+        owner  => 0,
+        group  => $group,
+        mode   => '0640',
+        warn   => true,
+        notify => Class['postgresql::server::reload'],
+      }
+
+      if $pg_hba_conf_defaults {
+        Postgresql::Server::Pg_hba_rule {
+          database => 'all',
+          user => 'all',
+        }
+
+        # Lets setup the base rules
+        $local_auth_option = $version ? {
+          '8.1'   => 'sameuser',
+          default => undef,
+        }
+        postgresql::server::pg_hba_rule { 'local access as postgres user':
+          type        => 'local',
+          user        => $user,
+          auth_method => 'ident',
+          auth_option => $local_auth_option,
+          order       => '001',
+        }
+        postgresql::server::pg_hba_rule { 'local access to database with same name':
+          type        => 'local',
+          auth_method => 'ident',
+          auth_option => $local_auth_option,
+          order       => '002',
+        }
+        postgresql::server::pg_hba_rule { 'allow localhost TCP access to postgresql user':
+          type        => 'host',
+          user        => $user,
+          address     => '127.0.0.1/32',
+          auth_method => 'md5',
+          order       => '003',
+        }
+        postgresql::server::pg_hba_rule { 'deny access to postgresql user':
+          type        => 'host',
+          user        => $user,
+          address     => $ip_mask_deny_postgres_user,
+          auth_method => 'reject',
+          order       => '004',
+        }
+
+        # ipv4acls are passed as an array of rule strings, here we transform
+        # them into a resources hash, and pass the result to create_resources
+        $ipv4acl_resources = postgresql_acls_to_resources_hash($ipv4acls,
+        'ipv4acls', 10)
+        create_resources('postgresql::server::pg_hba_rule', $ipv4acl_resources)
+
+        postgresql::server::pg_hba_rule { 'allow access to all users':
+          type        => 'host',
+          address     => $ip_mask_allow_all_users,
+          auth_method => 'md5',
+          order       => '100',
+        }
+        postgresql::server::pg_hba_rule { 'allow access to ipv6 localhost':
+          type        => 'host',
+          address     => '::1/128',
+          auth_method => 'md5',
+          order       => '101',
+        }
+
+        # ipv6acls are passed as an array of rule strings, here we transform
+        # them into a resources hash, and pass the result to create_resources
+        $ipv6acl_resources = postgresql_acls_to_resources_hash($ipv6acls,
+        'ipv6acls', 102)
+        create_resources('postgresql::server::pg_hba_rule', $ipv6acl_resources)
+      }
+    }
+
+    # We must set a "listen_addresses" line in the postgresql.conf if we
+    # want to allow any connections from remote hosts.
+    postgresql::server::config_entry { 'listen_addresses':
+      value => $listen_addresses,
+    }
+  } else {
+    file { $pg_hba_conf_path:
+      ensure => absent,
+    }
+    file { $postgresql_conf_path:
+      ensure => absent,
+    }
+  }
+}

data/modules/postgresql/manifests/server/config_entry.pp

@@ -0,0 +1,43 @@
+# Manage a postgresql.conf entry. See README.md for more details.
+define postgresql::server::config_entry (
+  $ensure = 'present',
+  $value  = undef,
+  $path   = false
+) {
+  $postgresql_conf_path = $postgresql::server::postgresql_conf_path
+
+  $target = $path ? {
+    false   => $postgresql_conf_path,
+    default => $path,
+  }
+
+  case $name {
+    /data_directory|hba_file|ident_file|include|listen_addresses|port|max_connections|superuser_reserved_connections|unix_socket_directory|unix_socket_group|unix_socket_permissions|bonjour|bonjour_name|ssl|ssl_ciphers|shared_buffers|max_prepared_transactions|max_files_per_process|shared_preload_libraries|wal_level|wal_buffers|archive_mode|max_wal_senders|hot_standby|logging_collector|silent_mode|track_activity_query_size|autovacuum_max_workers|autovacuum_freeze_max_age|max_locks_per_transaction|max_pred_locks_per_transaction|restart_after_crash/: {
+      Postgresql_conf {
+        notify => Class['postgresql::server::service'],
+        before => Class['postgresql::server::reload'],
+      }
+    }
+
+    default: {
+      Postgresql_conf {
+        notify => Class['postgresql::server::reload'],
+      }
+    }
+  }
+
+  case $ensure {
+    /present|absent/: {
+      postgresql_conf { $name:
+        ensure  => $ensure,
+        target  => $target,
+        value   => $value,
+        require => Class['postgresql::server::initdb'],
+      }
+    }
+
+    default: {
+      fail("Unknown value for ensure '${ensure}'.")
+    }
+  }
+}

data/modules/postgresql/manifests/server/contrib.pp

@@ -0,0 +1,27 @@
+# Install the contrib postgresql packaging. See README.md for more details.
+class postgresql::server::contrib (
+  $package_name   = $postgresql::params::contrib_package_name,
+  $package_ensure = 'present'
+) inherits postgresql::params {
+  validate_string($package_name)
+
+  package { 'postgresql-contrib':
+    ensure => $package_ensure,
+    name   => $package_name,
+    tag    => 'postgresql',
+  }
+
+  if($package_ensure == 'present' or $package_ensure == true) {
+    anchor { 'postgresql::server::contrib::start': }->
+    Class['postgresql::server::install']->
+    Package['postgresql-contrib']->
+    Class['postgresql::server::service']->
+    anchor { 'postgresql::server::contrib::end': }
+  } else {
+    anchor { 'postgresql::server::contrib::start': }->
+    Class['postgresql::server::service']->
+    Package['postgresql-contrib']->
+    Class['postgresql::server::install']->
+    anchor { 'postgresql::server::contrib::end': }
+  }
+}