diff --git a/ansible/files/postgresql_config/conf.d/pg_net.conf b/ansible/files/postgresql_config/conf.d/pg_net.conf
new file mode 100644
index 000000000..d863cad1c
--- /dev/null
+++ b/ansible/files/postgresql_config/conf.d/pg_net.conf
@@ -0,0 +1 @@
+pg_net.username = 'postgres'
diff --git a/ansible/tasks/finalize-ami.yml b/ansible/tasks/finalize-ami.yml
index a8531dd77..733c1ec85 100644
--- a/ansible/tasks/finalize-ami.yml
+++ b/ansible/tasks/finalize-ami.yml
@@ -4,7 +4,7 @@
     group: 'postgres'
     src: 'files/postgresql_config/postgresql-csvlog.conf'
 
-- name: auto_explain and pg_cron confs
+- name: auto_explain, pg_cron, and pg_net confs
   ansible.builtin.template:
     dest: "/etc/postgresql-custom/conf.d/{{ ext_item }}.conf"
     group: 'postgres'
@@ -12,6 +12,7 @@
   loop:
     - auto_explain
     - pg_cron
+    - pg_net
   loop_control:
     loop_var: 'ext_item'
 
diff --git a/docker/pgctld/orioledb-postgresql.conf.tmpl b/docker/pgctld/orioledb-postgresql.conf.tmpl
index 13a60e849..f494d0e32 100644
--- a/docker/pgctld/orioledb-postgresql.conf.tmpl
+++ b/docker/pgctld/orioledb-postgresql.conf.tmpl
@@ -281,6 +281,7 @@ restart_after_crash = off		# reinitialize after backend crash?
 # Add settings for extensions here
 auto_explain.log_min_duration = 10s
 cron.database_name = 'postgres'
+pg_net.username = 'postgres'
 pgsodium.getkey_script = '/usr/lib/postgresql/bin/pgsodium_getkey.sh'
 vault.getkey_script = '/usr/lib/postgresql/bin/pgsodium_getkey.sh'
 wal_log_hints = 'on'
diff --git a/docker/pgctld/postgresql.conf.tmpl b/docker/pgctld/postgresql.conf.tmpl
index 51c30f5cc..ca07c3bc3 100644
--- a/docker/pgctld/postgresql.conf.tmpl
+++ b/docker/pgctld/postgresql.conf.tmpl
@@ -283,6 +283,7 @@ restart_after_crash = off		# reinitialize after backend crash?
 # Add settings for extensions here
 auto_explain.log_min_duration = 10s
 cron.database_name = 'postgres'
+pg_net.username = 'postgres'
 pgsodium.getkey_script = '/usr/lib/postgresql/bin/pgsodium_getkey.sh'
 vault.getkey_script = '/usr/lib/postgresql/bin/pgsodium_getkey.sh'
 wal_log_hints = 'on'
diff --git a/nix/tests/postgresql.conf.in b/nix/tests/postgresql.conf.in
index 9ae301ac3..20968d7b1 100644
--- a/nix/tests/postgresql.conf.in
+++ b/nix/tests/postgresql.conf.in
@@ -799,3 +799,4 @@ vault.getkey_script = '@PGSODIUM_GETKEY_SCRIPT@'
 
 auto_explain.log_min_duration = 10s
 cron.database_name = 'postgres'
+pg_net.username = 'postgres'