From b0721ddbf5c0e32fdab6fda09855b061cc0fb1e1 Mon Sep 17 00:00:00 2001 From: Phantasm Date: Mon, 25 Nov 2024 00:03:04 +0100 Subject: [PATCH] docs openbsd: recommend changing pgsql auth method, remove redundant service check --- docs/installation/openbsd_en.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/installation/openbsd_en.md b/docs/installation/openbsd_en.md index f0d6b9e93..45cd03a9a 100644 --- a/docs/installation/openbsd_en.md +++ b/docs/installation/openbsd_en.md @@ -46,6 +46,11 @@ $ initdb -D /var/postgresql/data -U postgres Running PostgreSQL in a different directory than `/var/postgresql/data` requires changing the `daemon_flags` variable in the `/etc/rc.d/postgresql` script. +For security reasons it is recommended to change the authentication method for `local` and `host` connections with the localhost address to `scram-sha-256`.
+Do not forget to set a password for the `postgres` user before doing so, otherwise you won't be able to log back in unless you change the authentication method back to `trust`.
+Changing the password hashing algorithm is not needed.
+For more information [read](https://www.postgresql.org/docs/16/auth-pg-hba-conf.html) the PostgreSQL documentation. + Enable and start the postgresql service: ``` @@ -53,7 +58,7 @@ Enable and start the postgresql service: # rcctl start postgresql ``` -To check that PostgreSQL started properly and didn't fail right after starting, you can run `ps aux | grep postgres`, there should be multiple lines of output. Or alternatively run `# rcctl check postgresql` which should return `postgresql(ok)`. +To check that PostgreSQL started properly and didn't fail right after starting, run `# rcctl check postgresql` which should return `postgresql(ok)`. ### Configuring Pleroma