Skip to content

Commit 2e6bc99

Browse files
committed
docs: add comment to supabase_admin trust rule in pg_hba.conf
1 parent e4f7c5d commit 2e6bc99

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

ansible/files/postgresql_config/pg_hba.conf.j2

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,9 @@
7979
# TYPE DATABASE USER ADDRESS METHOD
8080

8181
# trust local connections
82+
# supabase_admin: trust over Unix socket only — no network exposure. Access
83+
# requires OS-level shell access to the host, which is already a stronger
84+
# security boundary than a database password.
8285
local all supabase_admin trust
8386
local all all peer map=supabase_map
8487
host all all 127.0.0.1/32 trust

0 commit comments

Comments
 (0)