Test out using password with repmgr to avoid trusting the network

/cc @jtevnan

mentioned in issue gitlab-com/infrastructure#2581

Need to check as well that this can work without any updates to pg_hba.conf

mentioned in issue #2713 (closed)

marked this issue as related to #2571

This is possible using .pgpass files. If we set postgresql['sql_replication_user'] to gitlab_repmgr, and manually set a password for the user.

From there, each node needs a .pgpass file with *:*:gitlab_repmgr:PASSWORD

This does require the password to be stored in plaintext in two locations now, the .pgpass file, as well as recovery.conf.

/cc @jtevnan

closed

@ibaum This looks like a good thing to document, I am sure we'll have questions about this. Can you make sure this lands in docs?

mentioned in issue #2735 (closed)