PostgreSQL and SSL

[Ty-Bot]

I can't add SSL to my postgreSQL in my environment. I can't seem to get Semaphore to connect without it. How can I tell Semaphore to not require SSL connection to PostGreSQL?

Semaphore 2.8.49
PostGreSQL 14

[fiftin]

Sorry for delay.

In you config.json:

 	"postgres": {
 		"host": "localhost",
 		"user": "postgres",
 		"pass": "***",
 		"name": "semaphore",
 		"options": {
          		"sslmode": "disable"
        	}
 	},

[zelanastasia]

And how this variable pass to env in k8s deployment?

[nikolay480]

We have the same problem, has a solution been found?

[fiftin]

I added env var SEMAPHORE_DB_OPTIONS. It is allows to set db connection options in json format: {"sslmode": "require"}.

[nikolay480]

The sslmode should be disabled by default.

Это действительно так и есть, после того как я пробовал добавить значение в переменную SEMAPHORE_DB_OPTIONS, была ошибка что значение указано дважды

[fiftin]

@nikolay480 спасибо, проверю

[fiftin]

Fixed in v2.9.108-beta.

You should use ENV variable -e SEMAPHORE_DB_OPTIONS={\"sslmode\":\"require\"} to use SSL for connecting to Postgres.

[bbaassssiiee]

Postgres SSL works fine with only self-signed certs. I use this bbaassssiiee.postgres_ssl role with semaphore.
https://galaxy.ansible.com/ui/standalone/roles/bbaassssiiee/postgres_ssl/documentation/