From 4088636865f755bd635025725c2d8f0d240397cb Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Thu, 3 Jul 2025 19:04:32 +0300 Subject: add support for PG sslmode and set it to prefer encrypted connections by default --- classes/Config.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'classes/Config.php') diff --git a/classes/Config.php b/classes/Config.php index 9cc5bc723..7be529e41 100644 --- a/classes/Config.php +++ b/classes/Config.php @@ -45,6 +45,9 @@ class Config { /** database server port */ const DB_PORT = "DB_PORT"; + /** PostgreSQL SSL mode (prefer, require, disabled) */ + const DB_SSLMODE = "DB_SSLMODE"; + /** this is a fallback falue for the CLI SAPI, it should be set to a fully-qualified tt-rss URL */ const SELF_URL_PATH = "SELF_URL_PATH"; @@ -219,6 +222,7 @@ class Config { Config::DB_NAME => [ "", Config::T_STRING ], Config::DB_PASS => [ "", Config::T_STRING ], Config::DB_PORT => [ "5432", Config::T_STRING ], + Config::DB_SSLMODE => [ "prefer", Config::T_STRING ], Config::SELF_URL_PATH => [ "https://example.com/tt-rss", Config::T_STRING ], Config::SINGLE_USER_MODE => [ "", Config::T_BOOL ], Config::PHP_EXECUTABLE => [ "/usr/bin/php", Config::T_STRING ], -- cgit v1.2.3-54-g00ecf