# moments — pg_ident.conf.d drop-in template
# Rendered by script/deploy.sh per host based on manifest.yml.
# Install path: /var/lib/pgsql/18/data/pg_ident.conf.d/{{HOST_FQDN}}.conf
# Apply with: sudo systemctl reload postgresql-18 — on BOTH magrathea
# (primary) and frankie (standby) so failover doesn't lock the app out.
#
# One line per (host, role) mapping. A host that runs both moments-api
# and moments-worker will have two lines (one for moments_ro, one for
# moments_rw).

cert_cn {{HOST_FQDN}} {{DB_ROLE}}