aboutsummaryrefslogtreecommitdiff
path: root/op_guide/stolon/create_database.md
diff options
context:
space:
mode:
Diffstat (limited to 'op_guide/stolon/create_database.md')
-rw-r--r--op_guide/stolon/create_database.md26
1 files changed, 26 insertions, 0 deletions
diff --git a/op_guide/stolon/create_database.md b/op_guide/stolon/create_database.md
new file mode 100644
index 0000000..fb3bdd9
--- /dev/null
+++ b/op_guide/stolon/create_database.md
@@ -0,0 +1,26 @@
+## 1. Create a LDAP user and assign a password for your service
+
+Go to guichet.deuxfleurs.fr
+
+ 1. Everything takes place in `ou=services,ou=users,dc=deuxfleurs,dc=fr`
+ 2. Create a new user, like `johny`
+ 3. Generate a random password with `openssl rand -base64 32`
+ 4. Hash it with `slappasswd`
+ 5. Add a `userpassword` entry with the hash
+
+This step can also be done using the automated tool `secretmgr.py` in the app folder.
+
+## 2. Connect to postgres with the admin users
+
+```bash
+# 1. Launch ssh tunnel given in the README
+# 2. Make sure you have postregsql client installed locally
+psql -h localhost -U postgres -W postgres
+```
+
+## 3. Create the binded users with LDAP in postgres + the database
+
+```sql
+CREATE USER johny;
+CREATE DATABASE amazingapp OWNER johny;
+```