# Unix socket is for the official local bootstrap only; no database host port is published.
local all all trust
hostnossl all all all reject
hostssl wikideck_custody postgres all scram-sha-256
hostssl wikideck_custody custody_owner all scram-sha-256
hostssl wikideck_custody custody_runtime all scram-sha-256
hostssl wikideck_custody custody_backup all scram-sha-256
host all all all reject