add db ssl config

saryani · saryani · commit f58a5f464acf · 2024-10-04T11:11:12.000+02:00
diff --git a/admin/main.go b/admin/main.go
@@ -444,6 +444,13 @@ func init() {
 			EnvVars:     []string{"DB_CONN_RETRY"},
 			Destination: &dbConfigValues.ConnRetry,
 		},
+		&cli.BoolFlag{
+			Name:        "db-ssl-mode",
+			Value:       false,
+			Usage:       "Whether to use SSL mode to connect to database or not, the default value is false",
+			EnvVars:     []string{"DB_SSL_MODE"},
+			Destination: &dbConfigValues.SSLMode,
+		},
 		&cli.BoolFlag{
 			Name:        "tls",
 			Aliases:     []string{"t"},
diff --git a/api/main.go b/api/main.go
@@ -365,6 +365,13 @@ func init() {
 			EnvVars:     []string{"DB_CONN_RETRY"},
 			Destination: &dbConfigValues.ConnRetry,
 		},
+		&cli.BoolFlag{
+			Name:        "db-ssl-mode",
+			Value:       false,
+			Usage:       "Whether to use SSL mode to connect to database or not, the default value is false",
+			EnvVars:     []string{"DB_SSL_MODE"},
+			Destination: &dbConfigValues.SSLMode,
+		},
 		&cli.BoolFlag{
 			Name:        "tls",
 			Aliases:     []string{"t"},
diff --git a/backend/backend.go b/backend/backend.go
@@ -12,7 +12,7 @@ import (
 
 const (
 	// DBString to format connection string to database for postgres
-	DBString = "host=%s port=%s dbname=%s user=%s password=%s sslmode=require"
+	DBString = "host=%s port=%s dbname=%s user=%s password=%s sslmode=%s"
 	// DBKey to identify the configuration JSON key
 	DBKey = "db"
 )
@@ -35,6 +35,7 @@ type JSONConfigurationDB struct {
 	MaxOpenConns    int    `json:"maxOpenConns"`
 	ConnMaxLifetime int    `json:"connMaxLifetime"`
 	ConnRetry       int    `json:"connRetry"`
+	SSLMode         bool   `json:"sslMode"`
 }
 
 // LoadConfiguration to load the DB configuration file and assign to variables
@@ -56,8 +57,12 @@ func LoadConfiguration(file, key string) (JSONConfigurationDB, error) {
 
 // PrepareDSN to generate DB connection string
 func PrepareDSN(config JSONConfigurationDB) string {
+	sslMode := "disable"
+	if config.SSLMode {
+		sslMode = "require"
+	}
 	return fmt.Sprintf(
-		DBString, config.Host, config.Port, config.Name, config.Username, config.Password)
+		DBString, config.Host, config.Port, config.Name, config.Username, config.Password, sslMode)
 }
 
 // GetDB to get PostgreSQL DB using GORM
diff --git a/tls/main.go b/tls/main.go
@@ -392,6 +392,13 @@ func init() {
 			EnvVars:     []string{"DB_CONN_RETRY"},
 			Destination: &dbConfigValues.ConnRetry,
 		},
+		&cli.BoolFlag{
+			Name:        "db-ssl-mode",
+			Value:       false,
+			Usage:       "Whether to use SSL mode to connect to database or not, the default value is false",
+			EnvVars:     []string{"DB_SSL_MODE"},
+			Destination: &dbConfigValues.SSLMode,
+		},
 		&cli.BoolFlag{
 			Name:        "tls",
 			Aliases:     []string{"t"},
