diff --git a/config/runtime.exs b/config/runtime.exs
index cc5e5ae3..11271956 100644
--- a/config/runtime.exs
+++ b/config/runtime.exs
@@ -168,7 +168,7 @@ if config_env() == :prod do
     secret: System.get_env("AWS_SECRET_ACCESS_KEY")
 
   config :towerops, Towerops.Repo,
-    # ssl: true,
+    ssl: true,
     url: database_url,
     pool_size: String.to_integer(System.get_env("POOL_SIZE") || "10"),
     # For machines with several cores, consider starting multiple pools of `pool_size`
diff --git a/priv/repo/migrations/20260125214531_enable_sslinfo.exs b/priv/repo/migrations/20260125214531_enable_sslinfo.exs
new file mode 100644
index 00000000..14d755ad
--- /dev/null
+++ b/priv/repo/migrations/20260125214531_enable_sslinfo.exs
@@ -0,0 +1,11 @@
+defmodule Towerops.Repo.Migrations.EnableSslinfo do
+  use Ecto.Migration
+
+  def up do
+    execute "CREATE EXTENSION IF NOT EXISTS sslinfo"
+  end
+
+  def down do
+    execute "DROP EXTENSION IF EXISTS sslinfo"
+  end
+end