@@ -54,25 +54,20 @@ if config_env() == :prod do
54
54
55
55
maybe_ipv6 = if System . get_env ( "ECTO_IPV6" ) , do: [ :inet6 ] , else: [ ]
56
56
57
+ ssl_config =
58
+ if System . get_env ( "DATABASE_SSL" , "true" ) == "true" ,
59
+ do: [ cacerts: :public_key . cacerts_get ( ) ] ,
60
+ else: nil
61
+
57
62
config :wordcharts , Wordcharts.Repo ,
58
63
database: System . get_env ( "DATABASE_NAME" ) ,
59
64
hostname: System . get_env ( "DATABASE_HOST" ) ,
60
65
password: System . get_env ( "DATABASE_USER_PASSWORD" ) ,
61
66
username: System . get_env ( "DATABASE_USER" ) ,
62
67
pool_size: String . to_integer ( System . get_env ( "POOL_SIZE" , "10" ) ) ,
63
68
port: String . to_integer ( System . get_env ( "DATABASE_PORT" , "5432" ) ) ,
64
- ssl: System . get_env ( "DATABASE_SSL" , "true" ) == "true" ,
65
- socket_options: maybe_ipv6 ,
66
- ssl_opts: [
67
- verify: :verify_peer ,
68
- cacerts: :public_key . cacerts_get ( ) ,
69
- versions: [ :"tlsv1.3" ] ,
70
- depth: 3 ,
71
- server_name_indication: String . to_charlist ( System . get_env ( "DATABASE_HOST" ) ) ,
72
- customize_hostname_check: [
73
- match_fun: :public_key . pkix_verify_hostname_match_fun ( :https )
74
- ]
75
- ]
69
+ ssl: ssl_config ,
70
+ socket_options: maybe_ipv6
76
71
77
72
# The secret key base is used to sign/encrypt cookies and other secrets.
78
73
# A default value is used in config/dev.exs and config/test.exs but you
0 commit comments