chore: add DB_CA_CERT option to postgres db connections for SSL (#414)

Author: coodos

infrastructure/evault-core/src/config/database.ts

@@ -15,4 +15,10 @@ export const AppDataSource = new DataSource({
     migrations: [join(__dirname, "../migrations/*.{ts,js}")],
     migrationsTableName: "migrations",
     subscribers: [],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 }) 

infrastructure/evault-core/src/core/provisioning/config/database.ts

@@ -15,5 +15,11 @@ export const ProvisioningDataSource = new DataSource({
     migrations: [],
     migrationsTableName: "migrations",
     subscribers: [],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 });
 

platforms/cerberus/src/database/data-source.ts

@@ -28,5 +28,11 @@ export const AppDataSource = new DataSource({
     ],
     migrations: [path.join(__dirname, "migrations", "*.ts")],
     subscribers: [PostgresSubscriber],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 });
 

platforms/dreamsync-api/src/database/data-source.ts

@@ -24,6 +24,12 @@ export const dataSourceOptions: DataSourceOptions = {
     migrations: [path.join(__dirname, "migrations", "*.ts")],
     logging: process.env.NODE_ENV === "development",
     subscribers: [PostgresSubscriber],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 };
 
 export const AppDataSource = new DataSource(dataSourceOptions);

platforms/evoting-api/src/database/data-source.ts

@@ -22,6 +22,12 @@ export const dataSourceOptions: DataSourceOptions = {
     migrations: [path.join(__dirname, "migrations", "*.ts")],
     logging: process.env.NODE_ENV === "development",
     subscribers: [PostgresSubscriber],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 };
 
 export const AppDataSource = new DataSource(dataSourceOptions);

platforms/group-charter-manager-api/src/database/data-source.ts

@@ -18,4 +18,10 @@ export const AppDataSource = new DataSource({
     entities: [User, Group, Message, CharterSignature],
     migrations: [path.join(__dirname, "migrations", "*.ts")],
     subscribers: [PostgresSubscriber],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 }); 

platforms/pictique-api/src/database/data-source.ts

@@ -20,4 +20,10 @@ export const AppDataSource = new DataSource({
     entities: [User, Post, Comment, Message, Chat, MessageReadStatus],
     migrations: [path.join(__dirname, "migrations", "*.ts")],
     subscribers: [PostgresSubscriber],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 });

platforms/registry/src/config/database.ts

@@ -17,4 +17,10 @@ export const AppDataSource = new DataSource({
     migrations: [join(__dirname, "../migrations/*.{ts,js}")],
     migrationsTableName: "migrations",
     subscribers: [],
+    ssl: process.env.DB_CA_CERT
+        ? {
+              rejectUnauthorized: false,
+              ca: process.env.DB_CA_CERT,
+          }
+        : false,
 })