Postgres ssl cert - non-self signed available?
rkm3
FREEOP

2 years ago

I saw in this thread (https://discord.com/channels/713503345364697088/1240272034777399374/1240272034777399374) from 20 days ago that PowerBI wont connect because of the SSL cert. I've got a similar use case of a tool that requires SSL certs to be signed.

Is this a deal breaker for Railway's Postgres?

Are there other options besides these:
1) Roll my own postgres image and get my own cert from a root ca
2) Switch database hosting to another cloud provider that can do ssh tunnels or ssl certs

18 Replies

rkm3
FREEOP

2 years ago

5d77fb37-1fba-4a55-bbd3-e0fab8243723


2 years ago

it looks like that error states the cert is outdated?

try switching the image tag to 16 and set a REGENERATE_CERTS variable to true


rkm3
FREEOP

2 years ago

Brody - you're the best. I'll try that.


rkm3
FREEOP

2 years ago

qq -- we're on Vpg15 ts2.12. Will the same variable work there to regenerate the certs or is it only 16?


2 years ago

at this moment Melissa has only implemented it for railways postgres 16 image with the self signed certs, are you using a railway image for postgres?


rkm3
FREEOP

2 years ago

Yes we're using the Railway image.


rkm3
FREEOP

2 years ago

But I think it's #15


2 years ago

can you link me to its ghcr listing?



2 years ago

thanks, at this time this is the only image that supports regenerating the certs -

cc @Melissa


rkm3
FREEOP

2 years ago

To make sure I understand, this change would upgrade us from 15 to 16.


2 years ago

you are using a timescale-postgis image, it does not support regenerating the self signed cert


rkm3
FREEOP

2 years ago

oh, I set it up a long time ago from some demo. We aren't using the timescale features.


2 years ago

then you could deploy a new postgres database and copy over the data?


rkm3
FREEOP

2 years ago

Can you point to a guide for moving the volume?


rkm3
FREEOP

2 years ago

I saw there's no S/FTP support and that you have to mount a container to access the volume.

There is no file browser, or direct file download. To access your files, you must do so via the attached service's mount point
https://docs.railway.app/reference/volumes
I'm not certain how to migrate the data.


rkm3
FREEOP

2 years ago

I guess I could backup and restore with pgutils?


2 years ago

yeah anything that can dump and restore, like pgdump and pgrestore


Loading...