X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4d6c3aec922838e8ad25b6b8ce229bf607a14de0..0e2f3e506566b1ceb54bd764d3f32c004e45f8b3:/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls

diff --git a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
index 7f4a9ca71c..a69b88cb17 100644
--- a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
+++ b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
@@ -26,9 +26,11 @@ postgres:
   {%- endif %}
   postgresconf: |-
     listen_addresses = '*'  # listen on all interfaces
-    #ssl = on
-    #ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
-    #ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
+    # If you want to enable communications' encryption to the DB server,
+    # uncomment these entries
+    # ssl = on
+    # ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
+    # ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
   acls:
     - ['local', 'all', 'postgres', 'peer']
     - ['local', 'all', 'all', 'peer']