21 lines
557 B
YAML
21 lines
557 B
YAML
---
|
|
version: "3.8"
|
|
|
|
# A CA bundle for verifying the database certificate, for a managed provider whose CA the system trust store does not carry.
|
|
#
|
|
# Keila reads the certificate body itself, not a path, so the secret holds the PEM and the entrypoint exports it as DB_CA_CERT:
|
|
#
|
|
# abra app secret insert <app> db_ca_cert v1 "$(cat rds-ca-bundle.pem)"
|
|
#
|
|
# Only consulted when DB_ENABLE_SSL is on.
|
|
|
|
services:
|
|
app:
|
|
secrets:
|
|
- db_ca_cert
|
|
|
|
secrets:
|
|
db_ca_cert:
|
|
external: true
|
|
name: ${STACK_NAME}_db_ca_cert_${SECRET_DB_CA_CERT_VERSION:-v1}
|