18830: address review comments

Arvados-DCO-1.1-Signed-off-by: Javier Bértoli <jbertoli@curii.com>

diff --git a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
index 7f4a9ca71cc1d9e5bdcaf0905ddd1b165e0f8bb2..a69b88cb173aa4f72e17343997c65d072456b9b9 100644 (file)
--- a/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
+++ b/tools/salt-install/config_examples/single_host/single_hostname/pillars/postgresql.sls
@@ -26,9 +26,11 @@ postgres:
   {%- endif %}
   postgresconf: |-
     listen_addresses = '*'  # listen on all interfaces
   {%- endif %}
   postgresconf: |-
     listen_addresses = '*'  # listen on all interfaces

-    #ssl = on
-    #ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
-    #ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'
+    # If you want to enable communications' encryption to the DB server,
+    # uncomment these entries
+    # ssl = on
+    # ssl_cert_file = '/etc/ssl/certs/arvados-snakeoil-cert.pem'
+    # ssl_key_file = '/etc/ssl/private/arvados-snakeoil-cert.key'

   acls:
     - ['local', 'all', 'postgres', 'peer']
     - ['local', 'all', 'all', 'peer']
   acls:
     - ['local', 'all', 'postgres', 'peer']
     - ['local', 'all', 'all', 'peer']