From: Jakub Czajka <jakub@ekhem.eu.org>
Date: Sun, 29 Jan 2023 13:22:50 +0000 (+0100)
Subject: [postgres] Disable local connections outside dedicated roles.
X-Git-Url: https://git.ekhem.eu.org/?a=commitdiff_plain;h=e6f9612b430f2dd9377f66e5e70d70a26727b726;p=server.git

[postgres] Disable local connections outside dedicated roles.
---

diff --git a/postgres/pg_hba.conf b/postgres/pg_hba.conf
index 1b94e9c..088be7a 100644
--- a/postgres/pg_hba.conf
+++ b/postgres/pg_hba.conf
@@ -96,10 +96,6 @@ host    mail_db         dkim            ::1/128                 trust
 local   matrix_db       synapse_user                            trust
 # "local" is for Unix domain socket connections only
 local   all             all                                     peer
-# IPv4 local connections:
-host    all             all             127.0.0.1/32            md5
-# IPv6 local connections:
-host    all             all             ::1/128                 md5
 # Allow replication connections from localhost, by a user with the
 # replication privilege.
 local   replication     all                                     peer