From d44b0b2955b7ce5a188142d81f5603859791e834 Mon Sep 17 00:00:00 2001
From: Jeff Moe <moe@forksand.com>
Date: Sun, 25 Nov 2018 23:10:09 -0700
Subject: [PATCH] postgres-xl firewall, startup, misc

---
 source/resources/apps/postgres-xl/README.md | 49 ++++++++++++++++-----
 1 file changed, 39 insertions(+), 10 deletions(-)

diff --git a/source/resources/apps/postgres-xl/README.md b/source/resources/apps/postgres-xl/README.md
index 6739853..3ea32ab 100644
--- a/source/resources/apps/postgres-xl/README.md
+++ b/source/resources/apps/postgres-xl/README.md
@@ -53,26 +53,46 @@ git checkout remotes/origin/XL_10_STABLE
 
 mkdir build_dir
 cd build_dir
-../configure
+../configure --bindir=/usr/local/bin
 make -j8
 sudo make install
 
+# System Startup
+vim /etc/systemd/system/postgresql.service
+[Unit]
+Description=PostgreSQL database server
+Documentation=man:postgres(1)
+
+[Service]
+Type=notify
+User=postgres
+ExecStart=/usr/local/bin/postgres -D /usr/local/pgsql/data
+ExecReload=/bin/kill -HUP $MAINPID
+KillMode=mixed
+KillSignal=SIGINT
+TimeoutSec=0
+
+[Install]
+WantedBy=multi-user.target
+
+
+
 # Configure
 adduser postgres
 
 Run this as root:
 /sbin/ldconfig /usr/local/pgsql/lib
 
+
+
 XXX no?
 Add this to ~/.bashrc
 LD_LIBRARY_PATH=/usr/local/pgsql/lib
 export LD_LIBRARY_PATH
 
-Add this to ~/.bashrc
-PATH=/usr/local/pgsql/bin:$PATH
-export PATH
+Set up user postgres to ssh to all nodes on database ethernet interface.
 
-XXX set up user postgres to ssh to all nodes ?
+chown postgres:postgres /usr/local/pgsql
 
 https://www.postgres-xl.org/documentation/pgxc-ctl.html
 
@@ -93,13 +113,14 @@ add datanode    slave  name host port pooler dir waldir archDir
 
 
 
-XLDIR=/usr/local/pgsql/
+XLDIR=/usr/local/pgsql
+export XLDIR
 pgxc_ctl prepare config empty
 
 pgxc_ctl add gtm master gtm_1 pg-pgxl-gtm-1 20001 "$XLDIR/gtm"
 XXX slave or proxy?
-pgxc_ctl add gtm slave  gtm_2 pg-pgxl-gtm-2 20001 "$XLDIR/gtm"
-pgxc_ctl add gtm_proxy  gtm_2 pg-pgxl-gtm-2 20001 "$XLDIR/gtm"
+XXX pgxc_ctl add gtm slave  gtm_2 pg-pgxl-gtm-2 20001 "$XLDIR/gtm"
+XXX pgxc_ctl add gtm_proxy  gtm_2 pg-pgxl-gtm-2 20001 "$XLDIR/gtm"
 
 pgxc_ctl add coordinator master coord_1 pg-pgxl-coord-1 30001 31001 "$XLDIR/coord-1" none none
 XXX master or slaves?
@@ -116,8 +137,16 @@ pgxc_ctl monitor all createdb -p 30001 test
 
 
 # Open Up firewall.
-Open up firewall ports for postgres and others.....
-
+Open up firewall ports for postgres and others. All TCP (?).
+Postgres:      5432
+GTM:          20001
+Coordinator:  30001
+Data Node:    40001
+
+-A INPUT -p tcp --dest 10.53.1.0/24 --dport  5432 -j ACCEPT
+-A INPUT -p tcp --dest 10.53.1.0/24 --dport 20001 -j ACCEPT
+-A INPUT -p tcp --dest 10.53.1.0/24 --dport 30001 -j ACCEPT
+-A INPUT -p tcp --dest 10.53.1.0/24 --dport 40001 -j ACCEPT
 
 
 # OmniDB