OED
OED copied to clipboard
postgres install issues
There are a few postgres install issues that need to be cleaned up and may be related so all put in one issue:
- [ ] The pastgres password is set to a default value so we need to decide other ways to set that are secure and best way to handle this.
- [ ] https://www.postgresql.org/docs/current/auth-password.html talks about password authentication methods. The docker website talks about the POSTGRES_HOST_AUTH_METHOD environment variable to set this where it is md5 by default. If you don’t then anyone can access DB.
- [ ] There is an issue about trust authentication as seen below (output of install). Note that once this is fixed we may need to let developers know because they may need to do something different to access DB with docker-compose. database_1 | WARNING: enabling "trust" authentication for local connections database_1 | You can change this by editing pg_hba.conf or using the option -A, or database_1 | --auth-local and --auth-host, the next time you run initdb.
postgres_trust_issue_fix.md update_pg_hba_conf.txt
This will help secure the OED database and will now ask for your database password in order to access this. The documentation will provide a walk through of how to run this script to change the trust setting.