diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -1753,6 +1753,11 @@
   - localhost
   - "::1"
 
+swh::deploy::provenance::db::dbname: swh-provenance
+swh::deploy::provenance::db::user: swh-provenance
+swh::deploy::provenance::db::host: met.internal.softwareheritage.org
+
+
 swh::deploy::indexer::storage::config:
   indexer_storage:
     cls: local
@@ -3589,4 +3594,4 @@
 
 nodejs::version: 14.x
 
-swh::provenance::db::shared_buffers: 32GB
\ No newline at end of file
+swh::provenance::db::shared_buffers: 32GB
diff --git a/data/hostname/met.internal.softwareheritage.org.yaml b/data/hostname/met.internal.softwareheritage.org.yaml
--- a/data/hostname/met.internal.softwareheritage.org.yaml
+++ b/data/hostname/met.internal.softwareheritage.org.yaml
@@ -59,10 +59,29 @@
   shared_buffers: "%{alias('swh::postgresql::shared_buffers')}"
   cluster_name: "%{alias('swh::postgresql::cluster_name')}"
 
-
 swh::dbs:
   provenance:
-    name: swh-provenance
-    user: swh-provenance
+    name: "%{hiera('swh::deploy::provenance::db::dbname')}"
+    user: "%{hiera('swh::deploy::provenance::db::user')}"
 
+# What aliases to install in .pg_service/.pgpass
+swh::postgres::service::dbs:
+  - alias: swh-provenance
+    name: "%{hiera('swh::deploy::provenance::db::dbname')}"
+    host: "%{hiera('swh::deploy::provenance::db::host')}"
+    port: "%{hiera('swh::deploy::db::pgbouncer::port')}"
+    user: guest
+  - alias: admin-swh-provenance
+    name: "%{hiera('swh::deploy::provenance::db::dbname')}"
+    host: "%{hiera('swh::deploy::provenance::db::host')}"
+    port: "%{hiera('swh::deploy::db::pgbouncer::port')}"
+    user: "%{hiera('swh::deploy::provenance::db::user')}"
+    password: "%{hiera('swh::deploy::provenance::db::password')}"
 
+# Install the .pg_service/.pgpass files to those users
+swh::postgres::service::users:
+  - root
+  - zack
+  - ardumont
+  - aeviso
+  - vsellier