1 files changed, 13 insertions, 0 deletions
diff --git a/modules/postgresql/manifests/user.pp b/modules/postgresql/manifests/user.pp
new file mode 100644
index 00000000..5b73b243
--- /dev/null
+++ b/modules/postgresql/manifests/user.pp
@@ -0,0 +1,13 @@
+# TODO convert to a regular type, so we can later change password
+# without erasing the current user
+define postgresql::user($password) {
+    $sql = "CREATE ROLE ${name} ENCRYPTED PASSWORD '\${pass}' NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT LOGIN;"
+
+    exec { "psql -U postgres -c \"${sql}\" ":
+        user        => 'root',
+        # do not leak the password on commandline
+        environment => "pass=${password}",
+        unless      => "psql -A -t -U postgres -c '\\du ${name}' | grep '${name}'",
+        require     => Service['postgresql'],
+    }
+}