projects / busui.git / commitdiff
search:
summary | shortlog | log | commit | commitdiff | tree
unified | plain
Add original route URL
Add original route URL

file:a/aws/pg_hba.conf -> file:b/aws/pg_hba.conf
# PostgreSQL Client Authentication Configuration File # PostgreSQL Client Authentication Configuration File
# =================================================== # ===================================================
# #
# Refer to the "Client Authentication" section in the # Refer to the "Client Authentication" section in the
# PostgreSQL documentation for a complete description # PostgreSQL documentation for a complete description
# of this file. A short synopsis follows. # of this file. A short synopsis follows.
# #
# This file controls: which hosts are allowed to connect, how clients # This file controls: which hosts are allowed to connect, how clients
# are authenticated, which PostgreSQL user names they can use, which # are authenticated, which PostgreSQL user names they can use, which
# databases they can access. Records take one of these forms: # databases they can access. Records take one of these forms:
# #
# local DATABASE USER METHOD [OPTIONS] # local DATABASE USER METHOD [OPTIONS]
# host DATABASE USER CIDR-ADDRESS METHOD [OPTIONS] # host DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
# hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS] # hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
# hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS] # hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTIONS]
# #
# (The uppercase items must be replaced by actual values.) # (The uppercase items must be replaced by actual values.)
# #
# The first field is the connection type: "local" is a Unix-domain socket, # The first field is the connection type: "local" is a Unix-domain socket,
# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an # "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an
# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket. # SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket.
# #
# DATABASE can be "all", "sameuser", "samerole", a database name, or # DATABASE can be "all", "sameuser", "samerole", a database name, or
# a comma-separated list thereof. # a comma-separated list thereof.
# #
# USER can be "all", a user name, a group name prefixed with "+", or # USER can be "all", a user name, a group name prefixed with "+", or
# a comma-separated list thereof. In both the DATABASE and USER fields # a comma-separated list thereof. In both the DATABASE and USER fields
# you can also write a file name prefixed with "@" to include names from # you can also write a file name prefixed with "@" to include names from
# a separate file. # a separate file.
# #
# CIDR-ADDRESS specifies the set of hosts the record matches. # CIDR-ADDRESS specifies the set of hosts the record matches.
# It is made up of an IP address and a CIDR mask that is an integer # It is made up of an IP address and a CIDR mask that is an integer
# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies # (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies
# the number of significant bits in the mask. Alternatively, you can write # the number of significant bits in the mask. Alternatively, you can write
# an IP address and netmask in separate columns to specify the set of hosts. # an IP address and netmask in separate columns to specify the set of hosts.
# #
# METHOD can be "trust", "reject", "md5", "password", "gss", "sspi", "krb5", # METHOD can be "trust", "reject", "md5", "password", "gss", "sspi", "krb5",
# "ident", "pam", "ldap" or "cert". Note that "password" sends passwords # "ident", "pam", "ldap" or "cert". Note that "password" sends passwords
# in clear text; "md5" is preferred since it sends encrypted passwords. # in clear text; "md5" is preferred since it sends encrypted passwords.
# #
# OPTIONS are a set of options for the authentication in the format # OPTIONS are a set of options for the authentication in the format
# NAME=VALUE. The available options depend on the different authentication # NAME=VALUE. The available options depend on the different authentication
# methods - refer to the "Client Authentication" section in the documentation # methods - refer to the "Client Authentication" section in the documentation
# for a list of which options are available for which authentication methods. # for a list of which options are available for which authentication methods.
# #
# Database and user names containing spaces, commas, quotes and other special # Database and user names containing spaces, commas, quotes and other special
# characters must be quoted. Quoting one of the keywords "all", "sameuser" or # characters must be quoted. Quoting one of the keywords "all", "sameuser" or
# "samerole" makes the name lose its special character, and just match a # "samerole" makes the name lose its special character, and just match a
# database or username with that name. # database or username with that name.
# #
# This file is read on server startup and when the postmaster receives # This file is read on server startup and when the postmaster receives
# a SIGHUP signal. If you edit the file on a running system, you have # a SIGHUP signal. If you edit the file on a running system, you have
# to SIGHUP the postmaster for the changes to take effect. You can use # to SIGHUP the postmaster for the changes to take effect. You can use
# "pg_ctl reload" to do that. # "pg_ctl reload" to do that.
   
# Put your actual configuration here # Put your actual configuration here
# ---------------------------------- # ----------------------------------
# #
# If you want to allow non-local connections, you need to add more # If you want to allow non-local connections, you need to add more
# "host" records. In that case you will also need to make PostgreSQL listen # "host" records. In that case you will also need to make PostgreSQL listen
# on a non-local interface via the listen_addresses configuration parameter, # on a non-local interface via the listen_addresses configuration parameter,
# or via the -i or -h command line switches. # or via the -i or -h command line switches.
# #
   
   
   
# TYPE DATABASE USER CIDR-ADDRESS METHOD # TYPE DATABASE USER CIDR-ADDRESS METHOD
   
# "local" is for Unix domain socket connections only # "local" is for Unix domain socket connections only
local all all trust local all all trust
# IPv4 local connections: # IPv4 local connections:
host all all 127.0.0.1/32 trust host all all 127.0.0.1/32 trust
# IPv6 local connections: # IPv6 local connections:
host all all ::1/128 trust host all all ::1/128 trust
  #Allow any IP to connect, with a password:
  host all all 0.0.0.0 0.0.0.0 md5
   
file:b/aws/postgresql.conf (new)
  # -----------------------------
  # PostgreSQL configuration file
  # -----------------------------
  #
  # This file consists of lines of the form:
  #
  # name = value
  #
  # (The "=" is optional.) Whitespace may be used. Comments are introduced with
  # "#" anywhere on a line. The complete list of parameter names and allowed
  # values can be found in the PostgreSQL documentation.
  #
  # The commented-out settings shown in this file represent the default values.
  # Re-commenting a setting is NOT sufficient to revert it to the default value;
  # you need to reload the server.
  #
  # This file is read on server startup and when the server receives a SIGHUP
  # signal. If you edit the file on a running system, you have to SIGHUP the
  # server for the changes to take effect, or use "pg_ctl reload". Some
  # parameters, which are marked below, require a server shutdown and restart to
  # take effect.
  #
  # Any parameter can also be given as a command-line option to the server, e.g.,
  # "postgres -c log_connections=on". Some parameters can be changed at run time
  # with the "SET" SQL command.
  #
  # Memory units: kB = kilobytes Time units: ms = milliseconds
  # MB = megabytes s = seconds
  # GB = gigabytes min = minutes
  # h = hours
  # d = days
 
 
  #------------------------------------------------------------------------------
  # FILE LOCATIONS
  #------------------------------------------------------------------------------
 
  # The default values of these variables are driven from the -D command-line
  # option or PGDATA environment variable, represented here as ConfigDir.
 
  #data_directory = 'ConfigDir' # use data in another directory
  # (change requires restart)
  #hba_file = 'ConfigDir/pg_hba.conf' # host-based authentication file
  # (change requires restart)
  #ident_file = 'ConfigDir/pg_ident.conf' # ident configuration file
  # (change requires restart)
 
  # If external_pid_file is not explicitly set, no extra PID file is written.
  #external_pid_file = '(none)' # write an extra PID file
  # (change requires restart)
 
 
  #------------------------------------------------------------------------------
  # CONNECTIONS AND AUTHENTICATION
  #------------------------------------------------------------------------------
 
  # - Connection Settings -
 
  listen_addresses = '*' # what IP address(es) to listen on;
  # comma-separated list of addresses;
  # defaults to 'localhost', '*' = all
  # (change requires restart)
  #port = 5432 # (change requires restart)
  max_connections = 100 # (change requires restart)
  # Note: Increasing max_connections costs ~400 bytes of shared memory per
  # connection slot, plus lock space (see max_locks_per_transaction).
  #superuser_reserved_connections = 3 # (change requires restart)
  #unix_socket_directory = '' # (change requires restart)
  #unix_socket_group = '' # (change requires restart)
  #unix_socket_permissions = 0777 # begin with 0 to use octal notation
  # (change requires restart)
  #bonjour_name = '' # defaults to the computer name
  # (change requires restart)
 
  # - Security and Authentication -
 
  #authentication_timeout = 1min # 1s-600s
  #ssl = off # (change requires restart)
  #ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH' # allowed SSL ciphers
  # (change requires restart)
  #ssl_renegotiation_limit = 512MB # amount of data between renegotiations
  #password_encryption = on
  #db_user_namespace = off
 
  # Kerberos and GSSAPI
  #krb_server_keyfile = ''
  #krb_srvname = 'postgres' # (Kerberos only)
  #krb_caseins_users = off
 
  # - TCP Keepalives -
  # see "man 7 tcp" for details
 
  #tcp_keepalives_idle = 0 # TCP_KEEPIDLE, in seconds;
  # 0 selects the system default
  #tcp_keepalives_interval = 0 # TCP_KEEPINTVL, in seconds;
  # 0 selects the system default
  #tcp_keepalives_count = 0 # TCP_KEEPCNT;
  # 0 selects the system default
 
 
  #------------------------------------------------------------------------------
  # RESOURCE USAGE (except WAL)
  #------------------------------------------------------------------------------
 
  # - Memory -
 
  shared_buffers = 32MB # min 128kB
  # (change requires restart)
  #temp_buffers = 8MB # min 800kB
  #max_prepared_transactions = 0 # zero disables the feature
  # (change requires restart)
  # Note: Increasing max_prepared_transactions costs ~600 bytes of shared memory
  # per transaction slot, plus lock space (see max_locks_per_transaction).
  # It is not advisable to set max_prepared_transactions nonzero unless you
  # actively intend to use prepared transactions.
  #work_mem = 1MB # min 64kB
  #maintenance_work_mem = 16MB # min 1MB
  #max_stack_depth = 2MB # min 100kB
 
  # - Kernel Resource Usage -
 
  #max_files_per_process = 1000 # min 25
  # (change requires restart)
  #shared_preload_libraries = '' # (change requires restart)
 
  # - Cost-Based Vacuum Delay -
 
  #vacuum_cost_delay = 0ms # 0-100 milliseconds
  #vacuum_cost_page_hit = 1 # 0-10000 credits
  #vacuum_cost_page_miss = 10 # 0-10000 credits
  #vacuum_cost_page_dirty = 20 # 0-10000 credits
  #vacuum_cost_limit = 200 # 1-10000 credits
 
  # - Background Writer -
 
  #bgwriter_delay = 200ms # 10-10000ms between rounds
  #bgwriter_lru_maxpages = 100 # 0-1000 max buffers written/round
  #bgwriter_lru_multiplier = 2.0 # 0-10.0 multipler on buffers scanned/round
 
  # - Asynchronous Behavior -
 
  #effective_io_concurrency = 1 # 1-1000. 0 disables prefetching
 
 
  #------------------------------------------------------------------------------
  # WRITE AHEA