mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-09 06:11:56 +02:00
868cd11874
Phase 1 of the PostgreSQL central data platform: - Salt states: init, enabled, disabled, config, ssl, auth, sostatus - TLS via SO CA-signed certs with postgresql.conf template - Two-tier auth: postgres superuser + so_postgres application user - Firewall restricts port 5432 to manager-only (HA-ready) - Wired into top.sls, pillar/top.sls, allowed_states, firewall containers map, docker defaults, CA signing policies, and setup scripts for all manager-type roles
15 lines
345 B
YAML
15 lines
345 B
YAML
postgres:
|
|
enabled: False
|
|
config:
|
|
listen_addresses: '*'
|
|
port: 5432
|
|
max_connections: 100
|
|
shared_buffers: 256MB
|
|
ssl: 'on'
|
|
ssl_cert_file: '/conf/postgres.crt'
|
|
ssl_key_file: '/conf/postgres.key'
|
|
ssl_ca_file: '/conf/ca.crt'
|
|
log_destination: 'stderr'
|
|
logging_collector: 'off'
|
|
log_min_messages: 'warning'
|