chore: By default, allow pgbouncer SSL connections (#517)

Signed-off-by: Lakshmipathi <[email protected]>
supabase · Feb 1, 2023 · 93fd309 · 93fd309
1 parent f6c0f16
commit 93fd309
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ansible/tasks/setup-pgbouncer.yml b/ansible/tasks/setup-pgbouncer.yml
@@ -110,6 +110,13 @@
     - "host  all  pgbouncer  127.0.0.1/32  scram-sha-256"
     - "# Connection configuration for pgbouncer user"
 
+- name: PgBouncer - By default allow ssl connections.
+  become: yes
+  copy:
+    dest: /etc/pgbouncer-custom/ssl-config.ini
+    content: |
+      client_tls_sslmode = allow
+
 - name: Grant pg_hba and pgbouncer grp perm for adminapi updates
   shell: |
      chmod g+w /etc/postgresql/pg_hba.conf