Postgres ssl cert - non-self signed available?
I saw in this thread (https://discord.com/channels/713503345364697088/1240272034777399374/1240272034777399374) from 20 days ago that PowerBI wont connect because of the SSL cert. I've got a similar use case of a tool that requires SSL certs to be signed.
Is this a deal breaker for Railway's Postgres?
Are there other options besides these:
1) Roll my own postgres image and get my own cert from a root ca
2) Switch database hosting to another cloud provider that can do ssh tunnels or ssl certs
17 Replies
Project ID:
5d77fb37-1fba-4a55-bbd3-e0fab8243723
5d77fb37-1fba-4a55-bbd3-e0fab8243723
it looks like that error states the cert is outdated?
try switching the image tag to
16
and set a REGENERATE_CERTS
variable to true
Brody - you're the best. I'll try that.
qq -- we're on Vpg15 ts2.12. Will the same variable work there to regenerate the certs or is it only 16?
at this moment Melissa has only implemented it for railways postgres 16 image with the self signed certs, are you using a railway image for postgres?
Yes we're using the Railway image.
But I think it's #15
can you link me to its ghcr listing?
GitHub
Build software better, together
GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.
thanks, at this time this is the only image that supports regenerating the certs -
https://github.com/railwayapp-templates/postgres-ssl/pkgs/container/postgres-ssl?tag=16
cc @Melissa
To make sure I understand, this change would upgrade us from 15 to 16.
you are using a timescale-postgis image, it does not support regenerating the self signed cert
oh, I set it up a long time ago from some demo. We aren't using the timescale features.
then you could deploy a new postgres database and copy over the data?
Can you point to a guide for moving the volume?
I saw there's no S/FTP support and that you have to mount a container to access the volume.
There is no file browser, or direct file download. To access your files, you must do so via the attached service's mount pointhttps://docs.railway.app/reference/volumes I'm not certain how to migrate the data.
I guess I could backup and restore with pgutils?
yeah anything that can dump and restore, like pg_dump and pg_restore