diff --git a/doc/settings/database.md b/doc/settings/database.md
index c95fb84812ee0c748897c09c88a50c0de0d3b195_ZG9jL3NldHRpbmdzL2RhdGFiYXNlLm1k..c939ec5e513cbb9ba8a9d4435329a14468fc9f90_ZG9jL3NldHRpbmdzL2RhdGFiYXNlLm1k 100644
--- a/doc/settings/database.md
+++ b/doc/settings/database.md
@@ -307,9 +307,10 @@
 - `md5_auth_cidr_addresses`: A list of CIDR address blocks that are allowed to
   connect to the server, after authentication with a password.
 - `trust_auth_cidr_addresses`: A list of CIDR address blocks that are allowed
-  to connect to the server, without authentication of any kind. _Be very careful
-  with this setting._ It's suggested that this be limited to the loopback
-  address of `127.0.0.1/24` or even `127.0.0.1/32`.
+  to connect to the server, without authentication of any kind. You should
+  only set this setting to allow connections from nodes that need to connect,
+  such as GitLab Rails or Sidekiq. This includes local connections when deployed
+  on the same node or from components such as Postgres Exporter (`127.0.0.1/32`).
 - `sql_user`: Controls the expected username for MD5 authentication. This
   defaults to `gitlab`, and isn't a required setting.
 - `sql_user_password`: Sets the password that PostgreSQL will accept for MD5