Skip to content

Commit

Permalink
Patroni: Replace md5 with postgresql_password_encryption_algorithm in…
Browse files Browse the repository at this point in the history
… pg_hba.conf section (#398)

This commit updates the pg_hba.conf file during the initdb process. The modification involves replacing the md5 password encryption algorithm with a dynamic, {{ postgresql_password_encryption_algorithm }}, which allows for flexible and secure password encryption.

Note that this configuration change applies only to the initdb process and further pg_hba.conf is managed using Ansible.

Issue #389
  • Loading branch information
vitabaks committed Jul 6, 2023
1 parent a2f3196 commit c5d96ca
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions roles/patroni/templates/patroni.yml.j2
Original file line number Diff line number Diff line change
Expand Up @@ -106,8 +106,8 @@ bootstrap:
{% endif %}

pg_hba: # Add following lines to pg_hba.conf after running 'initdb'
- host replication {{ patroni_replication_username }} 127.0.0.1/32 md5
- host all all 0.0.0.0/0 md5
- host replication {{ patroni_replication_username }} 127.0.0.1/32 {{ postgresql_password_encryption_algorithm }}
- host all all 0.0.0.0/0 {{ postgresql_password_encryption_algorithm }}


postgresql:
Expand Down

0 comments on commit c5d96ca

Please sign in to comment.