1 files changed, 13 insertions, 0 deletions
diff --git a/modules/postgresql/manifests/user.pp b/modules/postgresql/manifests/user.pp
new file mode 100644
index 00000000..b70dd122
--- /dev/null
+++ b/modules/postgresql/manifests/user.pp
@@ -0,0 +1,13 @@
+# TODO convert to a regular type, so we can later change password
+# without erasing the current user
+define postgresql::user($password) {
+    $sql = "CREATE ROLE $name ENCRYPTED PASSWORD '\$pass' NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT LOGIN;"
+
+    exec { "psql -U postgres -c \"$sql\" ":
+        user        => 'root',
+        # do not leak the password on commandline
+        environment => "pass=$password",
+        unless      => "psql -A -t -U postgres -c '\\du $name' | grep '$name'",
+        require     => Service['postgresql'],
+    }
+}