{# Rendered by Ansible — see ../install.yml. Lets the nightly dump job
   authenticate without the password appearing in a command line or a systemd
   unit. Mode 0600, owned by the Forgejo service user; libpq refuses to read it
   otherwise.

   Format is host:port:database:user:password, with literal backslashes and
   colons in the password escaped. #}
{{ app_config.DB_HOST }}:{{ app_config.DB_PORT }}:{{ app_config.DB_NAME }}:{{ app_config.DB_USER }}:{{ vault_secrets.DB_PASSWORD | replace('\\', '\\\\') | replace(':', '\\:') }}