Enable SSL from Postgres

[bennyv53]

Hello there,

I am currently running a PostgreSQL instance on my server using Cloudron, as part of baserow and I would like to understand the process for enabling SSL on this PostgreSQL service. Could anyone please provide guidance on how to configure SSL for the PostgreSQL instance to ensure secure connections?

We have been able to connect to the postgres server via SSH but one of the tools we are using requires ssl.

Specifically, I would appreciate details on the following:

1. Steps required to enable SSL for PostgreSQL within the Cloudron environment.
2. Any configuration changes needed for the PostgreSQL instance or any Cloudron-specific settings.
3. How to obtain and apply the necessary SSL certificates, if required.

Assistance in this matter would be greatly appreciated. Please let me know if any additional details required from my side.

[joseph]

@bennyv53 the PostgreSQL service is primarily for use by apps and not meant to be public facing. There is no mechanism to make it public facing. AFAIK, postgresl can only listen on SSL or plain and not both viceversa. Switching over the internal postgres to SSL would make it not work with any of the apps since the apps are configured with SSL connection.

[joseph]

Per https://github.com/glebarez/pgssl?tab=readme-ov-file#motivation , "PostgreSQL listens to both plain and SSL connections on a single port" . Looks like PostgreSQL can do ssl and non-ssl at the same time.

[joseph]

@bennyv53 said in Enable SSL from Postgres:

but one of the tools we are using requires ssl

It this somethign you can share here? Maybe there is a workaround specific to the tool .

[bennyv53]

@joseph - We are using glideapps.com, and it tries to connect Postgres using SSH or SSL/TLS. We don't want to use SSH, so we tried SSL/TLS, but glide keeps throwing the error related to SSL.

Let me know, if you need more details.

[joseph]

@bennyv53 I recommend using ssh then (SSL support for internal postgres will break Cloudron's setup). Is the concern security related?