host(koumakan): postgres: force scram-sha-256

soopyc · Jul 24, 2024 · e7f3886 · e7f3886
1 parent ca69620
commit e7f3886
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/systems/koumakan/services/databases/postgresql.nix b/systems/koumakan/services/databases/postgresql.nix
@@ -9,14 +9,12 @@
     package = pkgs.postgresql_15;
     dataDir = "/var/lib/postgresql/15";
 
-    authentication = ''
+    authentication = lib.mkForce ''
       # unix socket connection
       local   all             all                                     peer
       # local ipv4/6 tcp connection
       host    all             all             127.0.0.1/32            scram-sha-256
       host    all             all             ::1/128                 scram-sha-256
-      # world (encrypted) tcp traffic
-      hostssl all             all             all                     scram-sha-256
     '';
 
     settings = let