matomo-org / matomo

Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!
https://matomo.org/
GNU General Public License v3.0
19.93k stars 2.66k forks source link

Feature Request: Be able to install matomo to a a database that requires SSL #22315

Open Sean-Mattingly opened 5 months ago

Sean-Mattingly commented 5 months ago

It appears there is no way to install matomo to a database that requires SSL.

Some enterprise environments require SSL connections to their databases in the VPN. Period. You cannot turn it off (meaning you are not allowed) for the installation, like instructed here: https://matomo.org/faq/how-to-install/faq_26273/

Summary

I would like to be able to install matomo with an SSL connection to the database right from the beginning.

I am OK with doing this either in the UI, or with a commandline set of commands to install.

I would like to point out this would increase ease of adoption of matomo, thus increasing the userbase that may convert to paid support or cloud hosting plans.

Workaround

For others who may be interested, there is a workaround:

  1. Install matomo and point it to a local database (or another database you have access to that does not need SSL).
  2. Export the SQL after matomo has created tables from your local database.
  3. Run this SQL on your SSL database.
  4. Edit the config.ini.php of your matomo installation to point to the SSL database with the needed cert(s) and SSL config, and redeploy.

Your Environment

n/a

sgiehl commented 5 months ago

Hi @Sean-Mattingly,

Thanks for creating this issue. It's indeed not easily possible to initially set up Matomo with a database that requires SSL connection. Our product team will consider this for future improvements of Matomo.

Sean-Mattingly commented 5 months ago

Hi @sgiehl , thanks. I also found a workaround and put it in the main issue body.