diff --git a/.staging.cacert.key.enc b/.staging.cacert.key.enc
index c26daae2f..4fa8ac2a0 100644
Binary files a/.staging.cacert.key.enc and b/.staging.cacert.key.enc differ
diff --git a/.staging.cacert.pem.enc b/.staging.cacert.pem.enc
index e66a0c06f..539f69b59 100644
Binary files a/.staging.cacert.pem.enc and b/.staging.cacert.pem.enc differ
diff --git a/.staging.cert.key.enc b/.staging.cert.key.enc
index 62a5a52e5..f7bcb3b16 100644
Binary files a/.staging.cert.key.enc and b/.staging.cert.key.enc differ
diff --git a/.staging.cert.pem.enc b/.staging.cert.pem.enc
index 387556408..0e8a14897 100644
Binary files a/.staging.cert.pem.enc and b/.staging.cert.pem.enc differ
diff --git a/.staging.env.enc b/.staging.env.enc
index 6404a2975..fb05ba59e 100644
Binary files a/.staging.env.enc and b/.staging.env.enc differ
diff --git a/config/runtime.exs b/config/runtime.exs
index 5e0f8a51f..a3b0ce276 100644
--- a/config/runtime.exs
+++ b/config/runtime.exs
@@ -47,22 +47,22 @@ config :logflare,
              else: nil
            ),
          ssl: System.get_env("DB_SSL") == "true",
-         ssl_opts:
-           if(System.get_env("DB_SSL") == "true",
-             do: [
-               #  ssl opts follow recs here: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl
-               verify: :verify_peer,
-               cacerts: :public_key.cacerts_get(),
-               # allow intermediate CA
-               depth: 3,
-               versions: [:"tlsv1.2"],
-               # support wildcard
-               customize_hostname_check: [
-                 match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
-               ]
-             ],
-             else: nil
-           ),
+         #  ssl_opts:
+         #    if(System.get_env("DB_SSL") == "true",
+         #      do: [
+         #        #  ssl opts follow recs here: https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/ssl
+         #        verify: :verify_peer,
+         #        cacerts: :public_key.cacerts_get(),
+         #        # allow intermediate CA
+         #        depth: 3,
+         #        versions: [:"tlsv1.2"],
+         #        # support wildcard
+         #        customize_hostname_check: [
+         #          match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
+         #        ]
+         #      ],
+         #      else: nil
+         #    ),
          database: System.get_env("DB_DATABASE"),
          hostname: System.get_env("DB_HOSTNAME"),
          password: System.get_env("DB_PASSWORD"),
diff --git a/gcloud_staging.json.enc b/gcloud_staging.json.enc
index 9568db079..451070a77 100644
Binary files a/gcloud_staging.json.enc and b/gcloud_staging.json.enc differ