fix: Allow disabling SSL for Postgres connection with standard PGSSLMODE env

closes #1501
This commit is contained in:
Tom Moor
2020-09-04 12:51:48 -07:00
parent a98e8ad8df
commit 6b6d67beb6

View File

@ -4,6 +4,7 @@ import Sequelize from "sequelize";
import EncryptedField from "sequelize-encrypted";
const isProduction = process.env.NODE_ENV === "production";
const isSSLDisabled = process.env.PGSSLMODE === "disable";
export const encryptedFields = () =>
EncryptedField(Sequelize, process.env.SECRET_KEY);
@ -15,11 +16,12 @@ export const sequelize = new Sequelize(process.env.DATABASE_URL, {
logging: debug("sql"),
typeValidation: true,
dialectOptions: {
ssl: isProduction
? {
// Ref.: https://github.com/brianc/node-postgres/issues/2009
rejectUnauthorized: false,
}
: false,
ssl:
isProduction && !isSSLDisabled
? {
// Ref.: https://github.com/brianc/node-postgres/issues/2009
rejectUnauthorized: false,
}
: false,
},
});