From 8c34cced225e3b30311cd9e85296da00b6323142 Mon Sep 17 00:00:00 2001
From: Alex Lutay <1928266+taurus-forever@users.noreply.github.com>
Date: Tue, 18 Aug 2026 15:14:38 +0200
Subject: [PATCH] [DPE-10851] Secure peer IP to the adress itself

---
 templates/patroni.yml.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/patroni.yml.j2 b/templates/patroni.yml.j2
index 65bdc02c6bb..bd76d9c466a 100644
--- a/templates/patroni.yml.j2
+++ b/templates/patroni.yml.j2
@@ -213,7 +213,7 @@ postgresql:
     - {{ 'hostssl' if enable_tls else 'host' }} replication replication {{ endpoint }}/32 scram-sha-256
     {%- endfor %}
     {%- for peer_ip in peers_ips %}
-    - {{ 'hostssl' if enable_tls else 'host' }} replication replication {{ peer_ip }}/0 scram-sha-256
+    - {{ 'hostssl' if enable_tls else 'host' }} replication replication {{ peer_ip }}/32 scram-sha-256
     {%- endfor %}
 
   pg_ident: