wehub-resource-sync
75f3dd141c
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (actions) (push) Has been cancelled
CodeQL / Analyze (javascript-typescript) (push) Has been cancelled
CI and Release / lint-frontend (push) Has been cancelled
CI and Release / dockerfile-scan (push) Has been cancelled
CI and Release / test-frontend (push) Has been cancelled
CI and Release / lint-verification-agent (push) Has been cancelled
CI and Release / test-verification-agent (push) Has been cancelled
CI and Release / e2e-verification-agent (push) Has been cancelled
CI and Release / test-backend (push) Has been cancelled
CI and Release / build-dev-image (push) Has been cancelled
CI and Release / push-dev-image (push) Has been cancelled
CI and Release / build-image (push) Has been cancelled
CI and Release / build-verification-image (push) Has been cancelled
CI and Release / determine-version (push) Has been cancelled
CI and Release / push-image (push) Has been cancelled
CI and Release / push-verification-image (12) (push) Has been cancelled
CI and Release / lint-backend (push) Has been cancelled
CI and Release / push-verification-image (17) (push) Has been cancelled
CI and Release / push-verification-image (18) (push) Has been cancelled
CI and Release / release (push) Has been cancelled
CI and Release / publish-helm-chart (push) Has been cancelled
CI and Release / push-verification-image (13) (push) Has been cancelled
CI and Release / push-verification-image (14) (push) Has been cancelled
CI and Release / push-verification-image (15) (push) Has been cancelled
CI and Release / push-verification-image (16) (push) Has been cancelled
12 lines
788 B
Plaintext
12 lines
788 B
Plaintext
# Physical-backup mTLS test cluster: client-cert + password over TLS, plaintext
|
|
# rejected. Unlike the logical mTLS hba, this one carries an explicit
|
|
# `replication` line — `all` in the database column does NOT cover replication
|
|
# connections, so pg_receivewal / pg_basebackup would be rejected without it.
|
|
local all all trust
|
|
hostssl all all 0.0.0.0/0 scram-sha-256 clientcert=verify-ca
|
|
hostssl all all ::/0 scram-sha-256 clientcert=verify-ca
|
|
hostssl replication all 0.0.0.0/0 scram-sha-256 clientcert=verify-ca
|
|
hostssl replication all ::/0 scram-sha-256 clientcert=verify-ca
|
|
hostnossl all all 0.0.0.0/0 reject
|
|
hostnossl all all ::/0 reject
|