postgres: fix ssl config

2026-03-17 16:16:06 -04:00
parent 08ad1f4096
commit f436364d7a
1 changed files with 10 additions and 1 deletions
--- a/postgres/config/clusters/main.yaml
+++ b/postgres/config/clusters/main.yaml
@@ -32,12 +32,21 @@ spec:
        host: 10.105.6.198
        user: streaming_replica
        dbname: postgres
-        sslmode: allow
+        sslmode: verify-full
      plugin:
        name: barman-cloud.cloudnative-pg.io
        parameters:
          barmanObjectName: truenas-s3
          serverName: weyma-bs-pgsql
+      sslKey:
+        name: weyma-pgsql-replication
+        key: tls.key
+      sslCert:
+        name: weyma-pgsql-replication
+        key: tls.crt
+      sslRootCert:
+        name: weyma-pgsql-ca
+        key: ca.crt

  replica:
    primary: weyma-pgsql