Use a certificate file

[gsouf]

with node pg we can use ssl certificate files. Example from the doc:

const config = {
  database: 'database-name',
  host: 'host-or-ip',
  // this object will be passed to the TLSSocket constructor
  ssl: {
    rejectUnauthorized: false,
    ca: fs.readFileSync('/path/to/server-certificates/root.crt').toString(),
    key: fs.readFileSync('/path/to/client-key/postgresql.key').toString(),
    cert: fs.readFileSync('/path/to/client-certificates/postgresql.crt').toString(),
  },
}

I couldn't find a way to pass a certificate from the env variable to node-pg-migrate. Any way to do that ?

[Shinigami92]

I just know that the part with SSL has some comments here:

node-pg-migrate/bin/node-pg-migrate.ts

Lines 584 to 597 in f774b7a

	databaseUrl: {
	// eslint-disable-next-line @typescript-eslint/no-misused-spread
	...databaseUrl,
	...(typeof rejectUnauthorized === 'boolean'
	? {
	ssl: {
	// TODO @Shinigami92 2024-04-05: Fix ssl could be boolean
	// @ts-expect-error: ignore possible boolean for now
	...databaseUrl.ssl,
	rejectUnauthorized,
	},
	}
	: undefined),
	} as ClientConfig,

But looking into this part

node-pg-migrate/bin/node-pg-migrate.ts

Lines 438 to 445 in f774b7a

	DB_CONNECTION ??= {
	user: json.user,
	host: json.host || 'localhost',
	database: json.name || json.database,
	password: json.password,
	port: json.port || 5432,
	ssl: json.ssl,
	};

maybe you will have luck with the database-url-var 🤔