We could check some obvious security problems in pg_hba_file_rules , eg:
- existence of trust or password method (CRITICAL)
- md5 instead of scram (WARNING ?)
- syntax error in pg_hba.conf (CRITICAL)
Some others could be activated with options (host instead of hostnossl, 0.0.0.0 address…), and a perfectly configurable setup is probably an illusion, but a very basic service would already be already useful.
We could check some obvious security problems in pg_hba_file_rules , eg:
Some others could be activated with options (host instead of hostnossl, 0.0.0.0 address…), and a perfectly configurable setup is probably an illusion, but a very basic service would already be already useful.