diff --git a/doc/settings/database.md b/doc/settings/database.md index c95fb84812ee0c748897c09c88a50c0de0d3b195_ZG9jL3NldHRpbmdzL2RhdGFiYXNlLm1k..c939ec5e513cbb9ba8a9d4435329a14468fc9f90_ZG9jL3NldHRpbmdzL2RhdGFiYXNlLm1k 100644 --- a/doc/settings/database.md +++ b/doc/settings/database.md @@ -307,9 +307,10 @@ - `md5_auth_cidr_addresses`: A list of CIDR address blocks that are allowed to connect to the server, after authentication with a password. - `trust_auth_cidr_addresses`: A list of CIDR address blocks that are allowed - to connect to the server, without authentication of any kind. _Be very careful - with this setting._ It's suggested that this be limited to the loopback - address of `127.0.0.1/24` or even `127.0.0.1/32`. + to connect to the server, without authentication of any kind. You should + only set this setting to allow connections from nodes that need to connect, + such as GitLab Rails or Sidekiq. This includes local connections when deployed + on the same node or from components such as Postgres Exporter (`127.0.0.1/32`). - `sql_user`: Controls the expected username for MD5 authentication. This defaults to `gitlab`, and isn't a required setting. - `sql_user_password`: Sets the password that PostgreSQL will accept for MD5