config: add DB_SSLMODE for managed/remote PG (#10210)

* config: add DB_SSLMODE for managed/remote PG

* streaming: set PG sslmode, defaults to prefer

1 files changed, 6 insertions, 0 deletions

diff --git a/streaming/index.js b/streaming/index.js
index b4d09d0ad..21a1d47ef 100644
--- a/streaming/index.js
+++ b/streaming/index.js
@@ -89,6 +89,9 @@ const startWorker = (workerId) => {
       host:     process.env.DB_HOST || pg.defaults.host,
       port:     process.env.DB_PORT || pg.defaults.port,
       max:      10,
+      ssl: {
+        sslmode: process.env.DB_SSLMODE || 'prefer',
+      },
     },
 
     production: {
@@ -98,6 +101,9 @@ const startWorker = (workerId) => {
       host:     process.env.DB_HOST || 'localhost',
       port:     process.env.DB_PORT || 5432,
       max:      10,
+      ssl: {
+        sslmode: process.env.DB_SSLMODE || 'prefer',
+      },
     },
   };