From 9d9fbd6859a1acf2ae78e0621f68cc55421b3c5d Mon Sep 17 00:00:00 2001
From: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
Date: Mon, 3 Feb 2025 22:06:53 +0100
Subject: [PATCH] feat(databases): add CA SSL crt location to Postgres URLs

---
 app/Models/StandalonePostgresql.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/app/Models/StandalonePostgresql.php b/app/Models/StandalonePostgresql.php
index 7e8a071f3..b4b7ca59f 100644
--- a/app/Models/StandalonePostgresql.php
+++ b/app/Models/StandalonePostgresql.php
@@ -223,6 +223,9 @@ class StandalonePostgresql extends BaseModel
                 $url = "postgres://{$this->postgres_user}:{$this->postgres_password}@{$this->uuid}:5432/{$this->postgres_db}";
                 if ($this->enable_ssl) {
                     $url .= "?sslmode={$this->ssl_mode}";
+                    if (in_array($this->ssl_mode, ['verify-ca', 'verify-full'])) {
+                        $url .= '&sslrootcert=/etc/ssl/certs/coolify-ca.crt';
+                    }
                 }
 
                 return $url;
@@ -238,6 +241,9 @@ class StandalonePostgresql extends BaseModel
                     $url = "postgres://{$this->postgres_user}:{$this->postgres_password}@{$this->destination->server->getIp}:{$this->public_port}/{$this->postgres_db}";
                     if ($this->enable_ssl) {
                         $url .= "?sslmode={$this->ssl_mode}";
+                        if (in_array($this->ssl_mode, ['verify-ca', 'verify-full'])) {
+                            $url .= '&sslrootcert=/etc/ssl/certs/coolify-ca.crt';
+                        }
                     }
 
                     return $url;