Skip to content

Latest commit

 

History

History
99 lines (85 loc) · 2.17 KB

postgresql.md

File metadata and controls

99 lines (85 loc) · 2.17 KB
Raw

Run PostgreSQL v9.6 on macOS

Install

brew install [email protected]

Start

brew services start [email protected]

Stop

brew services stop [email protected]

Post Installation

Create a user postgres

createuser -s root

Verify PostgreSQL v9.6 is running and accessible:

psql -h 127.0.0.1 -p 5432 -U root -d postgres

Within psql shell, add a password:

ALTER USER root WITH PASSWORD 'root';
ALTER USER root WITH SUPERUSER;
CREATE USER temporal WITH PASSWORD 'temporal';
ALTER USER temporal WITH SUPERUSER;

Change the following file context:

emacs /usr/local/var/[email protected]/pg_hba.conf

from

local   all             all                                     trust
host    all             all             127.0.0.1/32            trust
host    all             all             ::1/128                 trust

to

local   all             all                                     md5
host    all             all             127.0.0.1/32            md5
host    all             all             ::1/128                 md5

then restart PostgreSQL:

brew services restart [email protected]

Verify password:

psql -h 127.0.0.1 -p 5432 -U root -d postgres
psql -h 127.0.0.1 -p 5432 -U temporal -d postgres

TLS

TLS Key / Cert Setup Guide

emacs /usr/local/var/[email protected]/postgresql.conf

setting the variables below to

ssl=on
ssl_cert_file=<path to the server-cert.pem>
ssl_key_file=<path to the server-key.pem>
ssl_ca_file=<path to the ca.pem>

emacs /usr/local/var/[email protected]/pg_hba.conf

changes the configs like below

hostssl    all             all             127.0.0.1/32            md5 clientcert=1                                                     
hostssl    all             all             ::1/128                 md5 clientcert=1

then restart PostgreSQL:

brew services restart [email protected]

Verify TLS & password:

psql "sslmode=require host=localhost dbname=postgres user=root \
  sslkey=<path to the client-key.pem> \
  sslcert=<path to the client-cert.pem> \
  sslrootcert=<path to the ca.pem>"