nixos/postgresql: fix inaccurate docs for authentication (#97622)

* nixos/postgresql: fix inaccurate docs for authentication

We actually use peer authentication, then md5 based authentication.
trust is not used.

* Use a link for mkForce docs

Co-authored-by: aszlig <aszlig@redmoonstudios.org>

Co-authored-by: lf- <lf-@users.noreply.github.com>
Co-authored-by: aszlig <aszlig@redmoonstudios.org>

Jade 2df221ec 0544a7f6

Changed files
+10 -5
nixos
modules
services
databases
+10 -5
nixos/modules/services/databases/postgresql.nix
···
type = types.lines;
default = "";
description = ''
-
Defines how users authenticate themselves to the server. By
-
default, "trust" access to local users will always be granted
-
along with any other custom options. If you do not want this,
-
set this option using "lib.mkForce" to override this
-
behaviour.
+
Defines how users authenticate themselves to the server. See the
+
<link xlink:href="https://www.postgresql.org/docs/current/auth-pg-hba-conf.html">
+
PostgreSQL documentation for pg_hba.conf</link>
+
for details on the expected format of this option. By default,
+
peer based authentication will be used for users connecting
+
via the Unix socket, and md5 password authentication will be
+
used for users connecting via TCP. Any added rules will be
+
inserted above the default rules. If you'd like to replace the
+
default rules entirely, you can use <function>lib.mkForce</function> in your
+
module.
'';
};