Change the default from md5 to scram-sha-256 in pg_hba.conf

Brandon Dunne · phracek · commit ee0fb133ee32 · 2026-04-08T20:05:44.000+02:00
diff --git a/12/root/usr/share/container-scripts/postgresql/common.sh b/12/root/usr/share/container-scripts/postgresql/common.sh
@@ -216,10 +216,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 
diff --git a/13/root/usr/share/container-scripts/postgresql/common.sh b/13/root/usr/share/container-scripts/postgresql/common.sh
@@ -216,10 +216,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 
diff --git a/15/root/usr/share/container-scripts/postgresql/common.sh b/15/root/usr/share/container-scripts/postgresql/common.sh
@@ -216,10 +216,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 
diff --git a/16/root/usr/share/container-scripts/postgresql/common.sh b/16/root/usr/share/container-scripts/postgresql/common.sh
@@ -216,10 +216,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 
diff --git a/18/root/usr/share/container-scripts/postgresql/common.sh b/18/root/usr/share/container-scripts/postgresql/common.sh
@@ -216,10 +216,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 
diff --git a/src/root/usr/share/container-scripts/postgresql/common.sh b/src/root/usr/share/container-scripts/postgresql/common.sh
@@ -217,10 +217,10 @@ EOF
 #
 
 # Allow connections from all hosts.
-host all all all md5
+host all all all scram-sha-256
 
 # Allow replication connections from all hosts.
-host replication all all md5
+host replication all all scram-sha-256
 EOF
 }
 

Original file line number	Diff line number	Diff line change
`@@ -216,10 +216,10 @@ EOF`
`216`	`216`	`#`
`217`	`217`
`218`	`218`	`# Allow connections from all hosts.`
`219`		`-host all all all md5`
	`219`	`+host all all all scram-sha-256`
`220`	`220`
`221`	`221`	`# Allow replication connections from all hosts.`
`222`		`-host replication all all md5`
	`222`	`+host replication all all scram-sha-256`
`223`	`223`	`EOF`
`224`	`224`	`}`
`225`	`225`
Original file line number	Diff line number	Diff line change
`@@ -217,10 +217,10 @@ EOF`
`217`	`217`	`#`
`218`	`218`
`219`	`219`	`# Allow connections from all hosts.`
`220`		`-host all all all md5`
	`220`	`+host all all all scram-sha-256`
`221`	`221`
`222`	`222`	`# Allow replication connections from all hosts.`
`223`		`-host replication all all md5`
	`223`	`+host replication all all scram-sha-256`
`224`	`224`	`EOF`
`225`	`225`	`}`
`226`	`226`