lab-ansible/roles/postgresql/templates/pg_hba.conf.j2

{# code: language=ansible-jinja #}
# THIS FILE IS MANAGED BY ANSIBLE
# TYPE  DATABASE        USER                    ADDRESS                 METHOD
local   all             postgres                                        peer
local   all             all                                             scram-sha-256
host    all             all                     127.0.0.1/32            scram-sha-256
host    all             all                     ::1/128                 scram-sha-256

{% for db in (databases | dict2items(key_name='name', value_name='vars')) %}
host    {{ db.name }}   {{ db.vars.username }}  {{ internal_subnet }}   scram-sha-256
{% endfor %}