Code changes for Issue hyperledger-labs#404 SSL enable Sequelize

zicaden · Jun 30, 2023 · 335c919 · 335c919
1 parent c21628b
commit 335c919
Showing 1 changed file with 20 additions and 4 deletions.
diff --git a/app/persistence/postgreSQL/PgService.ts b/app/persistence/postgreSQL/PgService.ts
@@ -97,10 +97,26 @@ export class PgService {
 	 * @memberof PgService
 	 */
 	getUserModel(attributes, options) {
-		const sequelize = new Sequelize(
-			`postgres://${this.pgconfig.user}:${this.pgconfig.password}@${this.pgconfig.host}:${this.pgconfig.port}/${this.pgconfig.database}`,
-			{ logging: false }
-		);
+
+		// Add SSL option for PostGresql- Issue #404
+		const isPostgresSslEnabled = process.env.DATABASE_SSL_ENABLED || false;
+
+		if (isPostgresSslEnabled) {
+			logger.info('SSL to Postgresql enabled: set dialect SSL option');
+			const sequelize = new Sequelize(
+				`postgres://${this.pgconfig.user}:${this.pgconfig.password}@${this.pgconfig.host}:${this.pgconfig.port}/${this.pgconfig.database}`,
+				{ logging: false, dialectOptions: { ssl: true, }, }
+			);
+		}else{
+			logger.info('SSL to Postgresql disabled: dialect options not set');
+			const sequelize = new Sequelize(
+				`postgres://${this.pgconfig.user}:${this.pgconfig.password}@${this.pgconfig.host}:${this.pgconfig.port}/${this.pgconfig.database}`,
+				{ logging: false }
+			);
+
+		}
+
+
 		this.userModel = sequelize.define('users', attributes, options);
 		return this.userModel;
 	}