Reachable from elsewhere: four gates, four different refusals
Let a remote application in without publishing the database on the internet: the bind address, the pg_hba record for a network, what scram-sha-256 does not encrypt, and the SSH tunnel that usually makes all of it unnecessary.
24 minutesTechnical content last reviewed on 14 Sept 2026
This lesson is for signed-in learners
Create an account to subscribe and record your learning progress.
What this lesson builds
- Administering PostgreSQL: access, connections and growth
- Knowing what the machine exposes, and closing the rest
- Working out why a service cannot be reached
