felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-07-21 20:41:25 +02:00
Code Issues Projects Releases Wiki Activity

bicep/postgresql: use scram-sha-256 as default password algorithm

Browse Source
This commit is contained in:
h7x4
2026-07-21 16:32:49 +09:00
parent 9bd81430a4
commit 950b163869
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/bicep/services/postgresql/default.nix
+4
View File
@@ -14,6 +14,7 @@ in
extensions = ps: with ps; [ pg_repack ]; extensions = ps: with ps; [ pg_repack ];
enableTCPIP = true; enableTCPIP = true;
# NOTE: md5 accepts both md5 and scram-sha-256
authentication = '' authentication = ''
host all all ${values.ipv4-space} md5 host all all ${values.ipv4-space} md5
host all all ${values.ipv6-space} md5 host all all ${values.ipv6-space} md5
@@ -76,6 +77,9 @@ in
maintenance_io_concurrency = 100; maintenance_io_concurrency = 100;
wal_recycle = true; wal_recycle = true;
# Authentication
password_encryption = "scram-sha-256";
# SSL # SSL
ssl = true; ssl = true;
ssl_cert_file = "/run/credentials/postgresql.service/cert"; ssl_cert_file = "/run/credentials/postgresql.service/cert";