update postgres config

Author: xc2f

README.md

@@ -66,3 +66,12 @@ docker-compose up -d
 ```bash
 git stash push -- docker-compose.yml
 ```
+
+### postgres 修改密码
+
+```bash
+docker-compose exec postgres sh
+psql -U postgres
+ALTER USER postgres WITH PASSWORD 'postgres';
+# 注：密码postgres要用引号引起来; 命令最后有分号
+```

docker-compose.yml

@@ -29,10 +29,13 @@ services:
     restart: always
     image: postgres:latest
     container_name: postgres
+    command: postgres -c config_file=/var/lib/postgresql/postgresql.conf
     volumes:
       - pgdata:/var/lib/postgresql
-    ports:
-      - '5432:5432'
+      - ./postgres/postgresql.conf:/var/lib/postgresql/postgresql.conf:ro
+      - ./postgres/pg_hba.conf:/var/lib/postgresql/pg_hba.conf:ro
+    # ports:
+    #   - '5432:5432'
     environment:
       - POSTGRES_USER=${DATABASE_USER}
       - POSTGRES_PASSWORD=${DATABASE_PASSWORD}

postgres/pg_hba.conf

@@ -0,0 +1,23 @@
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+
+# "local" is for Unix domain socket connections only
+# 容器内
+local   all             all                                     trust
+# local   all             all                                     scram-sha-256
+
+# Docker 内网
+host    all             all             172.16.0.0/12           scram-sha-256
+
+# 本机
+# IPv4 local connections:
+host    all             all             127.0.0.1/32            scram-sha-256
+# IPv6 local connections:
+host    all             all             ::1/128                 scram-sha-256
+
+# Allow replication connections from localhost, by a user with the
+# replication privilege.
+local   replication     all                                     scram-sha-256
+host    replication     all             127.0.0.1/32            scram-sha-256
+host    replication     all             ::1/128                 scram-sha-256
+
+host    all             all             all                     scram-sha-256

postgres/postgresql.conf

@@ -0,0 +1,3 @@
+listen_addresses='*'
+hba_file='/var/lib/postgresql/pg_hba.conf'
+password_encryption='scram-sha-256'