Hello, I am attempting to fix a fargate instance t...
# ory-selfhosting
g
Hello, I am attempting to fix a fargate instance that is running the boxyhq/jackson docker image that is connected to an AWS Postgres RDS instance that was upgraded from version 16 to version 17. Ever since doing that I have been unable to get the fargate instance to connect to my database because v17 enforces SSL by default. I am trying to change the connection method for the instance but no matter what I have set in the environment variables for the DB_SSL or the DB_SSL_REJECT_UNAUTHORIZED it will still throw an error that it cannot validate the certificate. I am attempting to copy the AWS RDS cert through an environment variable using docker-entrypoint.sh as the entry point and the following command 'wget -q $RDS_CA_CERT_URL -O /tmp/global-bundle.pem', export NODE_EXTRA_CA_CERTS=/tmp/global-bundle.pem', 'node /app/server.js' This has been unsuccessful as well. Could anyone let me know if this is a valid method, if it is, what I am doing wrong? Or if a better way could be used?
c
Could you try this and see if it works: DB_URL=postgres://user:password@host:5432/dbname?sslmode=no-verify DB_SSL=true DB_SSL_REJECT_UNAUTHORIZED=false PGSSLMODE=no-verify
g
That worked thank you, I was missing the no-verify on the URL and the PGSSLMODE.
🙌 1