From aa6c5e46b6802e13b47cfb1adcdd90660b7f7a47 Mon Sep 17 00:00:00 2001
From: Bret Mogilefsky <bmogilefsky@gmail.com>
Date: Sat, 7 Dec 2024 23:15:39 -0800
Subject: [PATCH] Make sure the Cloud Foundry-provided CA is recognized when
 making TLS connections

---
 supabase/meta.tf | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/supabase/meta.tf b/supabase/meta.tf
index 6b08edf..9b1cb53 100644
--- a/supabase/meta.tf
+++ b/supabase/meta.tf
@@ -37,7 +37,14 @@ resource "cloudfoundry_app" "supabase-meta" {
   }
   health_check_type          = "http"
   health_check_http_endpoint = "/"
-
+  
+  command = <<-EOT
+    # Make sure the Cloud Foundry-provided CA is recognized when making TLS connections
+    cat /etc/cf-system-certificates/* > /usr/local/share/ca-certificates/cf-system-certificates.crt
+    /usr/sbin/update-ca-certificates
+    # Now call the expected ENTRYPOINT and CMD
+    cd /usr/src/app && /usr/local/bin/docker-entrypoint.sh node dist/server/server.js
+    EOT
   environment = {
     # Upstream docs: https://github.com/supabase/postgres-meta/blob/master/README.md#quickstart