The PostgreSQL configuration currently uses md5 for authentication, which is considered outdated and less secure than scram-sha-256. Additionally, pg_hba.conf is configured to allow connections from 0.0.0.0/0, which is overly permissive.
Location:
deployment/choreo/development/docker/postgres/Dockerfile:44
Recommendation:
- Switch authentication method to
scram-sha-256.
- Restrict network access to the specific network range of the application instead of allowing all IPs.
The PostgreSQL configuration currently uses
md5for authentication, which is considered outdated and less secure thanscram-sha-256. Additionally,pg_hba.confis configured to allow connections from0.0.0.0/0, which is overly permissive.Location:
deployment/choreo/development/docker/postgres/Dockerfile:44Recommendation:
scram-sha-256.