selfheal-lab/selfheal-lab-gitops
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: require TLS for the legacy-api DB connection

Browse Source 
보안 리뷰 재지적(prefer는 평문 허용). DB 서버는 WP-09에서 TLS를 켠 상태로
구축하므로 처음부터 sslmode=require로 둔다(서버 인증서 검증은 WP-09에서 확정).
This commit is contained in:
seon committed 2026-09-24 00:05:54 +09:00
1 parent de771a5f1f
commit 390a903dbb
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
vm/legacy-api/apply.sh
+1 -1
View File
@@ -15,7 +15,7 @@ unset TOKEN
ENV_FILE=/opt/selfheal/legacy-api.env ENV_FILE=/opt/selfheal/legacy-api.env
umask 077 umask 077
{ {
printf 'DB_DSN=postgres://app:%s@10.20.0.20:5432/app?sslmode=prefer\n' "${DB_PASSWORD}" printf 'DB_DSN=postgres://app:%s@10.20.0.20:5432/app?sslmode=require\n' "${DB_PASSWORD}"
} > "$ENV_FILE" } > "$ENV_FILE"
unset DB_PASSWORD unset DB_PASSWORD
docker compose --env-file "$ENV_FILE" -f compose.yaml up -d --pull always --remove-orphans docker compose --env-file "$ENV_FILE" -f compose.yaml up -d --pull always --remove-orphans