Any of these may be a literal name, or *, which matches anything. The first match will be used so put more specific entries first. Entries with : or \ should be escaped with \.
The permissions on .pgpass must disallow any access to world or group; achieve this by the command chmod 0600 .pgaccess. If the permissions are less strict than this, the file will be ignored.