PostgreSQL

Connect to PostgreSQL databases, including managed services like Neon, Supabase, and Amazon RDS.

Prerequisites

Before creating a connection, you need:

1. A PostgreSQL database that is publicly accessible from the internet
2. A database user with read permissions on the tables you want to query

Network access

Your database must be publicly accessible from the internet for Reeflow to connect. If your database is behind a firewall or VPC, you will need to allow Reeflow’s egress IPs.

Creating a read-only database user

For security, create a dedicated read-only user for Reeflow rather than using an admin account. This limits the potential impact if credentials are compromised.

PostgreSQL 14+

PostgreSQL 14 introduced the pg_read_all_data role, which grants read access to all tables across all schemas on the instance:

UsernamePassword

-- Create the user
CREATE USER reeflow_reader WITH PASSWORD 'your-secure-password';

-- Grant read access to all data
GRANT pg_read_all_data TO reeflow_reader;

Restricting access to specific schemas

pg_read_all_data covers every schema on the instance. To limit Reeflow to specific schemas, grant permissions per schema instead:

-- Create the user
CREATE USER reeflow_reader WITH PASSWORD 'your-secure-password';

-- Grant connection access
GRANT CONNECT ON DATABASE your_database TO reeflow_reader;

-- Grant schema access (repeat for each schema)
GRANT USAGE ON SCHEMA public TO reeflow_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO reeflow_reader;
ALTER DEFAULT PRIVILEGES IN SCHEMA public
  GRANT SELECT ON TABLES TO reeflow_reader;

Run ALTER DEFAULT PRIVILEGES as the role that owns your tables to ensure future tables are also accessible.

PostgreSQL 13 and earlier

For older PostgreSQL versions, grant permissions manually on each schema:

UsernamePasswordDatabaseSchema

-- Create the user
CREATE USER reeflow_reader WITH PASSWORD 'your-secure-password';

-- Grant connection access
GRANT CONNECT ON DATABASE your_database TO reeflow_reader;

-- Grant schema access (repeat for each schema)
GRANT USAGE ON SCHEMA public TO reeflow_reader;

-- Grant SELECT on all existing tables
GRANT SELECT ON ALL TABLES IN SCHEMA public TO reeflow_reader;

-- Grant SELECT on future tables (run as the table owner)
ALTER DEFAULT PRIVILEGES IN SCHEMA public
GRANT SELECT ON TABLES TO reeflow_reader;

Configuration

When creating a PostgreSQL connection in Reeflow, provide the following:

Field	Description
Host	Hostname or IP address of your PostgreSQL server
Port	Database server port (default: 5432)
Username	The read-only user you created (e.g., reeflow_reader)
Password	Password for the database user
SSL	Enable SSL/TLS encryption for the connection
Database	Default database queries are issued against
Schema	Optional default schema. Defaults to public when omitted.

Tip

Always enable SSL for production databases to encrypt data in transit.

Creating a connection

Create a PostgreSQL connection

Add a PostgreSQL database as a data source in Reeflow.

Navigate to Connections in the main navigation, then click New Connection.

Enter a Name for the connection and an optional Description.

Select PostgreSQL as the connection type.

Enter your database Host, Port, Username, and Password. Enable SSL for production databases.

Click Test Connection to verify your credentials are correct.

Click Create Connection to save. The connection appears in your connections list.

1

2

3

4

5

6

Navigate to Connections in the main navigation, then click New Connection.

Enter a Name for the connection and an optional Description.

Select PostgreSQL as the connection type.

Enter your database Host, Port, Username, and Password. Enable SSL for production databases.

Click Test Connection to verify your credentials are correct.

Click Create Connection to save. The connection appears in your connections list.

PreviousNext

Related

• Connections overview
• Connection and table security