1 postgresql.conf +                                                                                                                                                                                                                                                       X
 hba_file = '/etc/postgresql/9.5/main/pg_hba.conf'   # host-based authentication file
                     # (change requires restart)
 ident_file = '/etc/postgresql/9.5/main/pg_ident.conf'   # ident configuration file
                     # (change requires restart)

 # If external_pid_file is not explicitly set, no extra PID file is written.
 external_pid_file = '/var/run/postgresql/9.5-main.pid'          # write an extra PID file
                     # (change requires restart)


 #------------------------------------------------------------------------------
 # CONNECTIONS AND AUTHENTICATION
 #------------------------------------------------------------------------------

 # - Connection Settings -
 listen_address = '*'
 #listen_addresses = 'localhost'     # what IP address(es) to listen on;
                     # comma-separated list of addresses;
                     # defaults to 'localhost'; use '*' for all
                     # (change requires restart)
 port = 5432             # (change requires restart)
 max_connections = 100           # (change requires restart)
 # Note:  Increasing max_connections costs ~400 bytes of shared memory per
 # connection slot, plus lock space (see max_locks_per_transaction).
 #superuser_reserved_connections = 3 # (change requires restart)
 unix_socket_directories = '/var/run/postgresql' # comma-separated list of directories
                     # (change requires restart)
 #unix_socket_group = ''         # (change requires restart)
 #unix_socket_permissions = 0777     # begin with 0 to use octal notation
                     # (change requires restart)
 #bonjour = off              # advertise server via Bonjour
                     # (change requires restart)
 #bonjour_name = ''          # defaults to the computer name
                     # (change requires restart)

 # - Security and Authentication -

 #authentication_timeout = 1min      # 1s-600s
 ssl = true              # (change requires restart)
                     # (change requires restart)
 #ssl_prefer_server_ciphers = on     # (change requires restart)
 #ssl_ecdh_curve = 'prime256v1'      # (change requires restart)
 ssl_cert_file = '/etc/ssl/certs/ssl-cert-snakeoil.pem'      # (change requires restart)
 ssl_key_file = '/etc/ssl/private/ssl-cert-snakeoil.key'     # (change requires restart)
 #ssl_ca_file = ''           # (change requires restart)
 #ssl_crl_file = ''          # (change requires restart)
 #password_encryption = on
 #db_user_namespace = off
 #row_security = on

 # GSSAPI using Kerberos
 #krb_server_keyfile = ''
 #krb_caseins_users = off

 # - TCP Keepalives -
 # see "man 7 tcp" for details

 #tcp_keepalives_idle = 0        # TCP_KEEPIDLE, in seconds;
                     # 0 selects the system default
 #tcp_keepalives_interval = 0        # TCP_KEEPINTVL, in seconds;
                     # 0 selects the system default
 #tcp_keepalives_count = 0       # TCP_KEEPCNT;
                     # 0 selects the system default