Skip to content

Commit

Permalink
Merge pull request #1729 from Logflare/fix/temp-disable-staging-ssl
Browse files Browse the repository at this point in the history
chore: temp disable staging ssl
  • Loading branch information
Ziinc authored Oct 9, 2023
2 parents 03011fa + e437889 commit 9bc5d5c
Show file tree
Hide file tree
Showing 7 changed files with 16 additions and 16 deletions.
Binary file modified .staging.cacert.key.enc
Binary file not shown.
Binary file modified .staging.cacert.pem.enc
Binary file not shown.
Binary file modified .staging.cert.key.enc
Binary file not shown.
Binary file modified .staging.cert.pem.enc
Binary file not shown.
Binary file modified .staging.env.enc
Binary file not shown.
32 changes: 16 additions & 16 deletions config/runtime.exs
Original file line number Diff line number Diff line change
Expand Up @@ -47,22 +47,22 @@ config :logflare,
else: nil
),
ssl: System.get_env("DB_SSL") == "true",
ssl_opts:
if(System.get_env("DB_SSL") == "true",
do: [
# ssl opts follow recs here: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl
verify: :verify_peer,
cacerts: :public_key.cacerts_get(),
# allow intermediate CA
depth: 3,
versions: [:"tlsv1.2"],
# support wildcard
customize_hostname_check: [
match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
]
],
else: nil
),
# ssl_opts:
# if(System.get_env("DB_SSL") == "true",
# do: [
# # ssl opts follow recs here: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl
# verify: :verify_peer,
# cacerts: :public_key.cacerts_get(),
# # allow intermediate CA
# depth: 3,
# versions: [:"tlsv1.2"],
# # support wildcard
# customize_hostname_check: [
# match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
# ]
# ],
# else: nil
# ),
database: System.get_env("DB_DATABASE"),
hostname: System.get_env("DB_HOSTNAME"),
password: System.get_env("DB_PASSWORD"),
Expand Down
Binary file modified gcloud_staging.json.enc
Binary file not shown.

0 comments on commit 9bc5d5c

Please sign in to comment.