-2
For a long time, before I had any idea about the concept of an SSH tunnel (which I use today, leaving the pg_hba.conf in its default state), even after carefully reading the manual, I ended up with a horror pg_hba.conf like this for my server:
# TYPE DATABASE USER ADDRESS ...