fix: insert pgbouncer pg_hba entries before any other rules (supabase#686)

pcnc · web-flow · commit 794bc244de4a · 2023-07-04T11:19:33.000+03:00
diff --git a/ansible/tasks/setup-pgbouncer.yml b/ansible/tasks/setup-pgbouncer.yml
@@ -103,12 +103,12 @@
   lineinfile:
     path: /etc/postgresql/pg_hba.conf
     state: present
-    insertafter: '# Default:'
+    insertafter: '^# TYPE'
     line: "{{ item }}"
   with_items:
+    - "# Connection configuration for pgbouncer user"
     - "host  all  pgbouncer  0.0.0.0/0  reject"
     - "host  all  pgbouncer  127.0.0.1/32  scram-sha-256"
-    - "# Connection configuration for pgbouncer user"
 
 - name: PgBouncer - By default allow ssl connections.
   become: yes
