Disable SSL for database connections on private network (#97)

Every timeout stack trace pointed at ssl_gen_statem.call/2 — the OTP 27
SSL gen_statem hanging during recv. PG is on private network (10.0.15.20)
and SSL verify was already disabled (verify_none), providing no security
benefit while adding CPU overhead and the gen_statem layer that caused
all connection timeouts.

Removed DATABASE_SSL and DATABASE_SSL_VERIFY env vars from both the
init container and main container. Also disabled SSL on the PG server
(ssl=off in postgresql.conf, hostssl→host in pg_hba.conf).

Reviewed-on: graham/towerops-web#97
This commit is contained in:
Graham McIntire 2026-03-20 12:48:05 -05:00 committed by graham
parent 8a54f9a866
commit fc03ed7b0e

View file

@ -47,10 +47,6 @@ spec:
env:
- name: MIX_ENV
value: "prod"
- name: DATABASE_SSL
value: "true"
- name: DATABASE_SSL_VERIFY
value: "false"
- name: RELEASE_COOKIE
valueFrom:
secretKeyRef:
@ -173,10 +169,6 @@ spec:
secretKeyRef:
name: towerops-secrets
key: CLOAK_KEY
- name: DATABASE_SSL
value: "true"
- name: DATABASE_SSL_VERIFY
value: "false"
- name: STRIPE_SECRET_KEY
valueFrom:
secretKeyRef: