> vim /etc/patroni/config.yml
...
pg_hba:
    - hostnossl all all 0.0.0.0/0 reject
    - hostnossl all all ::/0 reject
    - hostssl replication all 0.0.0.0/0 scram-sha-256
    - hostssl replication all ::/0 scram-sha-256
    - hostssl all all 0.0.0.0/0 scram-sha-256
    - hostssl all all ::/0 scram-sha-256