Database SSL - provide an option to generate certificates that support verify-full on multiple server setups. #7159
avesfelix
started this conversation in
Improvement Requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I've got a Coolify instance with multiple servers attached, and I'm running my websites and databases on separate servers on the same internal network. I've noticed that when I tick 'Enable SSL' on one of my databases, the certificate it generates has a Subject with a CN matching the internal Coolify network ID of the resource, not the IP or domain of the server.
If I set the security level to 'verify-full' when using the generated certificate, then connection from any of the projects on my web server will fail even when the certificate is correctly mounted, because they connect through the IP address, not the internal network ID. For Postgres I can get it working by lowering the security level to verify-ca, but for MongoDB this option is missing.
I know I can just generate a valid certificate on the server and overwrite the generated one, but it would be nice to have options for this without stepping outside Coolify!
Beta Was this translation helpful? Give feedback.
All reactions