paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-03 05:23:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

puppet: Support setting an ssl_mode verification level.

Browse Source
This commit is contained in:
Alex Vandiver
2022-03-10 20:07:50 +00:00
committed by Tim Abbott
parent 253bef27f5
commit d17006da55
6 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/production/deployment.md
View File

@@ -712,6 +712,15 @@ client connections.
Set to the path to the PEM-encoded private key used to secure client
connections.
#### `ssl_mode`
The mode that should be used to verify the server certificate. The
PostgreSQL default is `prefer`, which provides no security benefit; we
strongly suggest setting this to `require` or better if you are using
certificate authentication. See the [PostgreSQL
documentation](https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS)
for potential values.
#### `version`
The version of PostgreSQL that is in use. Do not set by hand; use the