Require SSL

Author: marcoacierno

infrastructure/applications/pretix/main.tf

@@ -97,6 +97,10 @@ resource "aws_ecs_task_definition" "pretix" {
           name  = "PRETIX_DATABASE_PORT"
           value = tostring(var.database_settings.port)
         },
+        {
+          name  = "PRETIX_DATABASE_SSLMODE"
+          value = "require"
+        },
         {
           name  = "PRETIX_MAIL_USER"
           value = module.secrets.value.mail_user

infrastructure/applications/pycon_backend/main.tf

@@ -2,7 +2,7 @@ locals {
   is_prod           = terraform.workspace == "production"
   admin_domain      = "admin"
   full_admin_domain = local.is_prod ? "${local.admin_domain}.pycon.it" : "${terraform.workspace}-${local.admin_domain}.pycon.it"
-  db_connection     = "postgres://${var.database_settings.username}:${var.database_settings.password}@${var.database_settings.address}:${var.database_settings.port}/pycon"
+  db_connection     = "postgres://${var.database_settings.username}:${var.database_settings.password}@${var.database_settings.address}:${var.database_settings.port}/pycon?sslmode=require"
   cdn_url           = local.is_prod ? "cdn.pycon.it" : "${terraform.workspace}-cdn.pycon.it"
 }