* debian/config.yml.in: Updated with more comments and using the postgres

user with local sockets as default mode.

debian/changelog

@@ -3,6 +3,8 @@ patroni (1.5.3-2) UNRELEASED; urgency=medium
   [ Michael Banck ]
   * debian/pg_createconfig_patroni: Set owner of Patroni configuration file to
     postgres.
+  * debian/config.yml.in: Updated with more comments and using the postgres
+    user with local sockets as default mode.
 
  -- Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org>  Mon, 14 Jan 2019 12:24:56 +0100
 

debian/config.yml.in

@@ -61,12 +61,10 @@ bootstrap:
 #      recovery_conf:
 #        restore_command: cp ../wal_archive/%f %p
 
-  # some desired options for 'initdb'
-  initdb:  # Note: It needs to be a list (some options need values, others are switches)
-  - encoding: UTF8
-  - data-checksums
-
-  pg_hba:  # Add following lines to pg_hba.conf after running 'initdb'
+  # Add following lines to pg_hba.conf after running 'initdb'. The replication
+  # user (replicator by default) should match the
+  # "postgresql/authenticaion/replication/username" item below.
+  pg_hba:
   - host replication replicator 127.0.0.1/32 md5
   - host all all 0.0.0.0/0 md5
 #  - hostssl all all 0.0.0.0/0 md5
@@ -80,6 +78,7 @@ postgresql:
 
   listen: @HOSTIP@:5432
   connect_address: @HOSTIP@:5432
+  use_unix_socket: true
   data_dir: /var/lib/postgresql/@VERSION@/@CLUSTER@
   bin_dir: /usr/lib/postgresql/@VERSION@/bin
   config_dir: /etc/postgresql/@VERSION@/@CLUSTER@
@@ -88,9 +87,15 @@ postgresql:
     replication:
       username: replicator
       password: rep-pass
-#    superuser:
-#      username: postgres
-#      password: zalando
+# A superuser role is required in order for Patroni to manage the local
+# Postgres instance.  If the option `use_unix_socket' is set to `true', then
+# specifying an empty password results in no md5 password for the superuser
+# being set and sockets being used for authentication. The `password:' line is
+# nevertheless required.  Note that pg_rewind will not work if no md5 password
+# is set.
+    superuser:
+      username: postgres
+      password:
   parameters:
     unix_socket_directories: '/var/run/postgresql/'
     # Emulate default Debian/Ubuntu logging