Is there a scheme for accessing the application (NodeJS) to the database, such that only the application has access?

Question

PostgreSQL

Actually there is an application on NodeJS, there is PSQL. The customer wants no one except the application to have access to the database.
Actually now access to a DB is simple on Login + Pass .
You can move the application to a separate server and the database to a separate server and allow access to the database server only for the ip of the application server. But authorization will be the same by login, password. And by going to this (NodeJS application server) server, we can also access the database through the console using a login-password.
Whether it is possible to think up more artful authorization?

Answer 1

https://postgrespro.ru/docs/postgresql/9.6/auth-methods

Answer 2

Yes, iptables will help you