exadel-inc / CompreFace

Leading free and open-source face recognition system
https://exadel.com/accelerator-showcase/compreface/
Apache License 2.0
5.7k stars 775 forks source link

Connection to a ssl protected database #1024

Open detresed opened 1 year ago

detresed commented 1 year ago

Hi,

i have the following configuration, with compreface run via docker-compse and an Azure Postgres server.

When running as single-container it somewhat went running, but only changing my profile did work, while every other action, like accessing an applicatoin resultet in a 502 bad gateway. So i ran them as multi-container solution, with the compre-api always crashing. In the logs i did find this image

So i tried to set ssl settings via the conenction string, but that resulted jsut in the folowing image

So finally i disabled ssl on the database server, and everything working fine. But running the connection unecrypted can't really be the solution, so I am wondering, if there is a way to configure compreface to use ssl with the database.

VolodymyrBushko commented 1 year ago

Hi @detresed

Datasource configuration classes: com/exadel/frs/core/trainservice/config/repository/DbConfig.java com/exadel/frs/core/trainservice/config/repository/NotificationDbConfig.java

We use two different datasource types in compre-api. SSL can be configured as usual for the first one, but it differs for the second one. In order to configure the second datasource properly as well, you can use the following guide: https://impossibl.github.io/pgjdbc-ng/docs/0.8.2/user-guide/#connection-ssl

An example of the connection string: jdbc:postgresql://localhost:5432/frs?ssl=true&sslmode=require&ssl.mode=require