X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4d6c3aec922838e8ad25b6b8ce229bf607a14de0..d70538d2019716a15159f85079d1174cc84e8407:/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls

diff --git a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
index 7f4a9ca71c..14452a9905 100644
--- a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
+++ b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
@@ -26,9 +26,11 @@ postgres:
   {%- endif %}
   postgresconf: |-
     listen_addresses = '*'  # listen on all interfaces
-    #ssl = on
-    #ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
-    #ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
+    # If you want to enable communications' encryption to the DB server,
+    # uncomment these entries
+    # ssl = on
+    # ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
+    # ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
   acls:
     - ['local', 'all', 'postgres', 'peer']
     - ['local', 'all', 'all', 'peer']
@@ -38,7 +40,7 @@ postgres:
   users:
     __CLUSTER___arvados:
       ensure: present
-      password: __DATABASE_PASSWORD__
+      password: "__DATABASE_PASSWORD__"
 
   # tablespaces:
   #   arvados_tablespace: