lab-ansible/roles/postgresql/templates/pg_hba.conf.j2

{# code: language=ansible-jinja #}
# THIS FILE IS MANAGED BY ANSIBLE

# TYPE  DATABASE         USER             ADDRESS                METHOD
local   all              postgres                                peer
local   all              all                                     scram-sha-256
host    all              all              127.0.0.1/32           scram-sha-256
host    all              all              ::1/128                scram-sha-256

{% for _, app in databases|dictsort %}
host    {{ app.db }}    {{ app.user }}    {{ internal_subnet }}  scram-sha-256
{% endfor %}