Function postgresqlHBAs

internal/pgbouncer/postgres.go:204–214

()

}

func postgresqlHBAs() []*postgres.HostBasedAuthentication {
	// PgBouncer must connect over TLS using a SCRAM password. Other network
	// connections are forbidden.
	// - https://www.postgresql.org/docs/current/auth-pg-hba-conf.html
	// - https://www.postgresql.org/docs/current/auth-password.html

	return []*postgres.HostBasedAuthentication{
		postgres.NewHBA().Users(PostgresqlUser).TLS().Method("scram-sha-256"),
		postgres.NewHBA().Users(PostgresqlUser).TCP().Method("reject"),
	}
}