# PostgreSQL Client Authentication Configuration File
# Foxhunt HFT Trading System - Production Security

# TYPE  DATABASE        USER            ADDRESS                 METHOD

# "local" is for Unix domain socket connections only
local   all             all                                     peer

# IPv4 local connections:
host    all             all             127.0.0.1/32            md5

# IPv6 local connections:
host    all             all             ::1/128                 md5

# Docker network connections
host    all             all             172.21.0.0/24           md5  # backend-network
host    all             all             172.22.0.0/24           md5  # database-network
host    all             all             172.30.0.0/24           md5  # infrastructure-network

# Foxhunt application user connections
host    foxhunt         foxhunt         172.21.0.0/24           md5
host    foxhunt         foxhunt         172.22.0.0/24           md5
host    foxhunt         foxhunt         172.30.0.0/24           md5

# Administrative connections
host    all             postgres        172.21.0.0/24           md5
host    all             postgres        172.22.0.0/24           md5
host    all             postgres        172.30.0.0/24           md5

# PgAdmin connections
host    all             foxhunt         172.30.0.0/24           md5

# Replication connections
host    replication     replicator      172.21.0.0/24           md5
host    replication     replicator      172.22.0.0/24           md5

# Deny all other connections
host    all             all             0.0.0.0/0               reject