search

docker-library / postgres

Docker Official Image packaging for Postgres
http://www.postgresql.org
MIT License
2.16k stars 1.13k forks source link

the right way to update the image and enable SSL (including cert/key file and pg_hba.conf) #1081

Closed andreaaizza closed 1 year ago

andreaaizza commented 1 year ago

Hi,

any doc describing what in subject?

It should basically boil down to: 1) update postgresql.conf: ssl=on... set cert and key file names 2) upload cert and key files in the image 3) update pg_hba.conf with hostssl ...

But, where in the image filesystem should I put postgresql.conf and pg_hba.conf? What ever iss in /var/lib/postgresql/data/ is ovewritten. I can set arguments to docker run... but I need to run this on kubernetes and would like to have that in a custom image. Also, some customisation can be done via POSTGRES_HOST_AUTH_METHOD, but I cannot use that for SSL.

Therefore the question in subject. Can anybody help?

Cheers, Andrea

ImreSamu commented 1 year ago

Hi Andrea In my opinion, you can use this example for SSL support: https://github.com/docker-library/postgres/issues/989#issuecomment-1222648067

andreaaizza commented 1 year ago

Hi @ImreSamu,

thanks. I think that covers parms of postgresql.conf via command line, and cert/key file. Good! I'm wondering, how is that solution implementing the customization of pg_hba.conf? It should at least include "hostssl...", and in some cases some more finetuning.

Regards, Andrea