PostgreSQL

A raw wire-protocol probe, not HTTP — address is host or host:port, no scheme. Port defaults to 5432 when omitted. product: postgres is also accepted as an alias for postgresql.

The version comes from a ParameterStatus message every PostgreSQL backend sends automatically right after authentication succeeds — no explicit SHOW server_version query needed.

targets:
  - id: pg-main
    product: postgresql
    address: db.example.com:5432
    credentials: pg-app

Authentication

Only required if the server actually asks for one — trust auth needs no credential at all. When it does ask, trust, cleartext, MD5, and SCRAM-SHA-256 are all supported and negotiated automatically — including SCRAM-SHA-256, the default on PostgreSQL 14+ and common on 10-13, without which most real deployments would be unreachable.

credentials:
  pg-app:
    kind: password
    username: enodia_ro   # optional — defaults to "postgres" if omitted
    password: "${PG_PASSWORD}"

The database connected to defaults to the same value as the username (server-side default) — there’s currently no config field to point at a different database name explicitly.

Lifecycle resolver

endoflife:postgresql.