K8 db self sigend ssl v2 (#359)

knusperkrone · web-flow · commit 45f31fe659dc · 2021-09-29T08:23:44.000+02:00
* Allow self signed certs

* Allow self sigend certs for storage-mq
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -117,6 +117,7 @@ services:
       POSTGRES_USER: storagemq
       POSTGRES_PW: storagemq-pw
       POSTGRES_SCHEMA: 'storage'
+      POSTGRES_SSL: "false"
 
       AMQP_URL: 'amqp://rabbit_adm:R4bb!7_4DM_p4SS@rabbitmq:5672'
 
diff --git a/storage/storage-mq/src/env.ts b/storage/storage-mq/src/env.ts
@@ -9,6 +9,7 @@ export const POSTGRES_USER = readEnvOrDie('POSTGRES_USER')
 export const POSTGRES_PW = readEnvOrDie('POSTGRES_PW')
 export const POSTGRES_DB = readEnvOrDie('POSTGRES_DB')
 export const POSTGRES_SCHEMA = readEnvOrDie('POSTGRES_SCHEMA')
+export const POSTGRES_SSL = readEnvOrDie('POSTGRES_SSL').toLowerCase() === 'true'
 
 export const AMQP_URL = readEnvOrDie('AMQP_URL')
 
diff --git a/storage/storage-mq/src/index.ts b/storage/storage-mq/src/index.ts
@@ -20,6 +20,7 @@ import {
   CONNECTION_BACKOFF,
   POSTGRES_HOST,
   POSTGRES_PORT,
+  POSTGRES_SSL,
   POSTGRES_USER,
   POSTGRES_PW, POSTGRES_DB
 } from './env'
@@ -32,6 +33,7 @@ const POOL_CONFIG: PoolConfig = {
   user: POSTGRES_USER,
   password: POSTGRES_PW,
   database: POSTGRES_DB,
+  ssl: POSTGRES_SSL ? { rejectUnauthorized: false } : false,
   max: 20,
   idleTimeoutMillis: 30000,
   connectionTimeoutMillis: 2000
