# "local" is for Unix domain socket connections only
local all all ident sameuser
-# IPv4 local connections:
-host all all 127.0.0.1/32 md5
-# IPv6 local connections:
-host all all ::1/128 md5
% for m in cfg.hosts + [cfg.db, cfg.remote, cfg.console]:
host ${cfg.db.dbname} ${cfg.db.user} ${m.ip}/32 trust
% endfor