Add TLS/mTLS options in database and cache settings for PostgreSQL and Redis

[Shivangi-ch]

This PR fixes: #28

Current behavior:- With the current settings we can use PostgreSQL as database and Redis as cache, we only have to specify it in the configurations.

• For PostgreSQL we can set the database: backend: config to postgresql
• For Redis we can give the server location in redis: location: config

By giving these configs our application will start running with postgresql and redis as DB and cache respectively.

However, the current settings.py does not specify any TLS/mTLS options for DB and cache.

New Behavior:- So to support TLS connections with the database and cache I have added new options only for postgresql database and redis caches.

The new keys added are:-

• for postresql
  • database: sslmode
  • database: sslrootcert
  • database: sslcert
  • database: sslkey
• for redis
  • redis: ssl_cert_reqs
  • redis: ssl_ca_certs
  • redis: ssl_keyfile
  • redis: ssl_certfile

These values should be set in the configurations before running the server if we need to run in TLS/mTLS mode.

I have tested the code manually by running postgresql locally on a different port.

[Shivangi-ch]

@mariobehling, @marcoag could you please review the PR

[hongquan]

I think we should not enable TLS if we are connecting PostgreSQL, Redis on the same machine. It means that we should check for DATABASES['default']['HOST'] before building and applying config for TLS.

If connecting database on the same machine, the connection is already safe. Adding TLS just add overhead without benefit.

What do you think, Mario, Marco?

[hongquan]

By the way, I think that the routine of building TLS config can be extracted to some file and imported to settings.py, because the settings.py file is already too long, and has many nested blocks.

[hongquan]

Why is this PR almost the same as #45 ? Have you copied from the same source?

[hongquan]

You copied the code from upstream https://github.com/pretix/pretix/blob/3b98d87a26d02f3dd72a28452421ce42b6bc6620/src/pretix/settings.py#L126-L143, which is illegal.

You may not understand the scope of the work. eventyay-tickets is a fork of pretix, but at the time pretix changed its license. It means that any code you see in pretix which is later than the forking time, is under license which is not compatible with eventyay-tickets, and eventyay-tickets is not allowed to copy.

[Shivangi-ch]

You may not understand the scope of the work. eventyay-tickets is a fork of pretix, but at the time pretix changed its license. It means that any code you see in pretix which is later than the forking time, is under license which is not compatible with eventyay-tickets, and eventyay-tickets is not allowed to copy.

hey @hongquan, I was not aware about that so I just tried to follow the PR mentioned in the issue... I will make a new PR for this with your recommended changes