Disable SSL for database connections on private network (#97)
Every timeout stack trace pointed at ssl_gen_statem.call/2 — the OTP 27 SSL gen_statem hanging during recv. PG is on private network (10.0.15.20) and SSL verify was already disabled (verify_none), providing no security benefit while adding CPU overhead and the gen_statem layer that caused all connection timeouts. Removed DATABASE_SSL and DATABASE_SSL_VERIFY env vars from both the init container and main container. Also disabled SSL on the PG server (ssl=off in postgresql.conf, hostssl→host in pg_hba.conf). Reviewed-on: graham/towerops-web#97
This commit is contained in:
parent
8a54f9a866
commit
fc03ed7b0e
1 changed files with 0 additions and 8 deletions
|
|
@ -47,10 +47,6 @@ spec:
|
|||
env:
|
||||
- name: MIX_ENV
|
||||
value: "prod"
|
||||
- name: DATABASE_SSL
|
||||
value: "true"
|
||||
- name: DATABASE_SSL_VERIFY
|
||||
value: "false"
|
||||
- name: RELEASE_COOKIE
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
|
|
@ -173,10 +169,6 @@ spec:
|
|||
secretKeyRef:
|
||||
name: towerops-secrets
|
||||
key: CLOAK_KEY
|
||||
- name: DATABASE_SSL
|
||||
value: "true"
|
||||
- name: DATABASE_SSL_VERIFY
|
||||
value: "false"
|
||||
- name: STRIPE_SECRET_KEY
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue