Manage SSL locally/in Heroku

textbook · Feb 1, 2024 · 12bc96a · 12bc96a
1 parent d70050d
commit 12bc96a
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/api/db.js b/api/db.js
@@ -3,9 +3,19 @@ import { default as pg } from "pg";
 import config from "./utils/config.js";
 import logger from "./utils/logger.js";
 
+const databaseUrl = new URL(config.databaseUrl);
+
+const localDb = ["0.0.0.0", "127.0.0.1", "localhost"].includes(
+	databaseUrl.hostname,
+);
+const sslMode = ["prefer", "require", "verify-ca", "verify-full"].includes(
+	databaseUrl.searchParams.get("sslmode") ?? "none",
+);
+
 const pool = new pg.Pool({
-	connectionString: config.databaseUrl,
+	connectionString: databaseUrl.toString(),
 	connectionTimeoutMillis: 5_000,
+	ssl: localDb ? false : { rejectUnauthorized: sslMode },
 });
 
 pool.on("error", (err) => logger.error("%O", err));

diff --git a/api/utils/config.js b/api/utils/config.js
@@ -14,7 +14,7 @@ configDotenv({ path: dotenvPath });
 requireArgs(["DATABASE_URL"]);
 
 /**
- * @property {string} databaseUrl
+ * @property {URL} databaseUrl
  * @property {string} dotenvPath
  * @property {string} logLevel
  * @property {number} port