From f436364d7a1edb421fd3e743379de217912be596 Mon Sep 17 00:00:00 2001
From: William P <me@williamtpeebles.com>
Date: Tue, 17 Mar 2026 16:16:06 -0400
Subject: [PATCH] postgres: fix ssl config

---
 postgres/config/clusters/main.yaml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/postgres/config/clusters/main.yaml b/postgres/config/clusters/main.yaml
index a1757bf..d2f9c43 100644
--- a/postgres/config/clusters/main.yaml
+++ b/postgres/config/clusters/main.yaml
@@ -32,12 +32,21 @@ spec:
         host: 10.105.6.198
         user: streaming_replica
         dbname: postgres
-        sslmode: allow
+        sslmode: verify-full
       plugin:
         name: barman-cloud.cloudnative-pg.io
         parameters:
           barmanObjectName: truenas-s3
           serverName: weyma-bs-pgsql
+      sslKey:
+        name: weyma-pgsql-replication
+        key: tls.key
+      sslCert:
+        name: weyma-pgsql-replication
+        key: tls.crt
+      sslRootCert:
+        name: weyma-pgsql-ca
+        key: ca.crt
 
   replica:
     primary: weyma-pgsql