From 7f3c5bcd6135cac14113b50fa3de42b955fb05f5 Mon Sep 17 00:00:00 2001 From: Daniel Bernstein Date: Mon, 21 Oct 2024 10:13:32 -0700 Subject: [PATCH] [PP-1832] Require SSL when talking to postgres --- docker-compose.yml | 4 ++-- tox.ini | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index a9579597..940bee23 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -26,8 +26,8 @@ services: ports: - "80:80" environment: - - SIMPLIFIED_TEST_DATABASE=postgresql://simplified_test:simplified_test@libreg_local_db:5433/simplified_registry_test - - SIMPLIFIED_PRODUCTION_DATABASE=postgresql://simplified:simplified@libreg_local_db:5433/simplified_registry_dev + - SIMPLIFIED_TEST_DATABASE=postgresql://simplified_test:simplified_test@libreg_local_db:5433/simplified_registry_test?sslmode=require + - SIMPLIFIED_PRODUCTION_DATABASE=postgresql://simplified:simplified@libreg_local_db:5433/simplified_registry_dev?sslmode=require - FLASK_ENV=development - AWS_ACCESS_KEY_ID=TEST - AWS_SECRET_ACCESS_KEY=testpassword diff --git a/tox.ini b/tox.ini index eb810b8c..c8a382e4 100644 --- a/tox.ini +++ b/tox.ini @@ -11,7 +11,7 @@ passenv = SIMPLIFIED_* CI setenv = - docker: SIMPLIFIED_TEST_DATABASE=postgresql://simplified_test:test@localhost:9015/simplified_registry_test + docker: SIMPLIFIED_TEST_DATABASE=postgresql://simplified_test:test@localhost:9015/simplified_registry_test?sslmode=require docker: AWS_ACCESS_KEY_ID=TEST docker: AWS_SECRET_ACCESS_KEY=testpassword docker: SIMPLIFIED_AWS_S3_ENDPOINT_URL=http://localhost:9004