# TYPE DATABASE USER ADDRESS METHOD
# Allow local socket connections with password only
local all all scram-sha-256
host all all 127.0.0.1/32 scram-sha-256
host all all ::1/128 scram-sha-256
# Require client certs for all TCP connections
hostssl all all 0.0.0.0/0 cert
hostssl all all ::0/0 cert