feat(auth): enforce SSL for db connection to prevent MITM & snooping

2026-09-24 15:45:35 +08:00 · 2025-02-17 15:21:12 -08:00
parent 59dda992a1
commit 50d03c6896
1 changed files with 3 additions and 0 deletions
@@ -8,5 +8,8 @@ const connectionString = process.env.POSTGRES_URL || process.env.DATABASE_URL!
 // Disable prefetch as it is not supported for "Transaction" pool mode
 const client = postgres(connectionString, {
  prepare: false,
+  ssl: {
+    rejectUnauthorized: true,
+  },
 })
 export const db = drizzle(client)