THREESCALE-4185: Support TLS protected PostgreSQL (#532)

* Add env. variables to provide certificates and keys * Add new var `DATABASE_SSL_MODE` for Postgres
3scale · Jul 23, 2024 · 5b08c2f · 5b08c2f
1 parent 44eeee3
commit 5b08c2f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/database.yml b/config/database.yml
@@ -11,6 +11,10 @@ default: &default
   connect_timeout: 5
   variables:
     statement_timeout: 5000 # ms
+  sslmode: <%= ENV.fetch('DATABASE_SSL_MODE', ENV.fetch('DATABASE_SSL_CA', nil) ? 'verify-full' : 'disable') %>
+  sslrootcert: <%= ENV['DATABASE_SSL_CA'] %>
+  sslcert: <%= ENV['DATABASE_SSL_CERT'] %>
+  sslkey: <%= ENV['DATABASE_SSL_KEY'] %>
 
 development:
   <<: *default