WEBDIENSTE/lasuite-docs
1
0
Fork 0
mirror of https://github.com/suitenumerique/docs.git synced 2026-09-27 12:04:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

🔧(yhub) document how to enable secure postrgesql connection

Browse Source 
Document how to enable secure postgresql connection if needed.
This commit is contained in:
Manuel Raynaud
2026-09-23 12:06:05 +02:00
parent b27091ba3c
commit daf00a45e8
2 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/yhub-server/README.md
+9
View File
@@ -556,6 +556,15 @@ the DDL is applied (`relation "yhub_ydoc_tombstones_v1" does not exist`, for
instance). Nothing in this repository copies the schema, so an upgrade is
`package.json` plus this script and nothing else.
The connection is not encrypted unless the url asks for it. A server that only
has `hostssl` rules in its `pg_hba.conf` — the default of the Zalando/Spilo
operator — answers `pg_hba.conf rejects connection for host ..., no
encryption`: append `?sslmode=require` to `POSTGRES`
(`postgres://user:pass@host:5432/yhub?sslmode=require`), or
`?sslmode=verify-full` when the certificate of the server is signed by an
authority Node trusts (`NODE_EXTRA_CA_CERTS`). The server, the worker and
`init-db` all read the same url, so the parameter is set once.
From the repository root, `make migrate-yhub` runs it against the dev stack —
the counterpart of `make migrate` for the Django database. `make bootstrap`
already includes it, so a fresh checkout needs nothing extra; an upgrade is