Skip to main content
Kill -9 Club
Sign in

Reachable from elsewhere: four gates, four different refusals

Let a remote application in without publishing the database on the internet: the bind address, the pg_hba record for a network, what scram-sha-256 does not encrypt, and the SSH tunnel that usually makes all of it unnecessary.

24 minutesTechnical content last reviewed on 14 Sept 2026

This lesson is for signed-in learners

Create an account to subscribe and record your learning progress.

What this lesson builds

  • Administering PostgreSQL: access, connections and growth
  • Knowing what the machine exposes, and closing the rest
  • Working out why a service cannot be reached