From dd90083ed7f3dc5d1e6e17ac44f5e9ad20213508 Mon Sep 17 00:00:00 2001 From: Alex Vandiver Date: Mon, 14 Jun 2021 00:14:46 -0700 Subject: [PATCH] puppet: Provide FQDN of self as URI, so the certificate validates. Failure to do this results in: ``` psql: error: failed to connect to `host=localhost user=zulip database=zulip`: failed to write startup message (x509: certificate is valid for [redacted], not localhost) ``` --- puppet/zulip_ops/templates/teleport_db.yaml.template.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/puppet/zulip_ops/templates/teleport_db.yaml.template.erb b/puppet/zulip_ops/templates/teleport_db.yaml.template.erb index c1b9174fd6..fd9274b50d 100644 --- a/puppet/zulip_ops/templates/teleport_db.yaml.template.erb +++ b/puppet/zulip_ops/templates/teleport_db.yaml.template.erb @@ -27,7 +27,7 @@ db_service: databases: - name: "<%= @hostname %>" protocol: "postgres" - uri: "localhost:5432" + uri: "<%= @fqdn %>:5432" ca_cert_file: /etc/ssl/certs/teleport-ca.crt static_labels: hostname: "<%= @hostname %>"