restrict postgres on nominatim to internal ip

diff --git a/roles/nominatim-master.rb b/roles/nominatim-master.rb
index e54179fd70b59c158b286740b70786b959253420..44fd9360897c5faefaa15e18658b138440dd1f75 100644 (file)
--- a/roles/nominatim-master.rb
+++ b/roles/nominatim-master.rb
@@ -6,7 +6,6 @@ default_attributes(
     :versions => ["9.3"],
     :settings => {
       :defaults => {
-        :listen_addresses => "*",
         :wal_level => "hot_standby",
         :archive_mode => "on",
         :archive_command => "/bin/cp %p /data/postgresql-archive/%f",

diff --git a/roles/pummelzacken.rb b/roles/pummelzacken.rb
index 495f2a612e64daf5f84462aa6b17dd3a5b5da7da..68eaefb133ba77a80a295c10f5bdeda94bc3226b 100644 (file)
--- a/roles/pummelzacken.rb
+++ b/roles/pummelzacken.rb
@@ -21,6 +21,7 @@ default_attributes(
   :postgresql => {
     :settings => {
       :defaults => {
+        :listen_addresses => "10.0.0.20",
         :shared_buffers => "10GB",
         :work_mem => "160MB",
         :maintenance_work_mem => "10GB",