# PostgreSQL Client Authentication Configuration File (Replica)
# TYPE  DATABASE        USER            ADDRESS                 METHOD

# Local connections
local   all             all                                     trust

# IPv4 local connections
host    all             all             127.0.0.1/32            scram-sha-256

# IPv6 local connections
host    all             all             ::1/128                 scram-sha-256

# Replication connections (in case this replica is promoted to primary)
local   replication     all                                     trust
host    replication     all             127.0.0.1/32            trust
host    replication     all             ::1/128                 trust
host    replication     replicator      0.0.0.0/0               md5

# Application connections from any host
host    all             all             0.0.0.0/0               scram-sha-256

# SSL connections
hostssl all             all             all                     cert