Use SSL for postgres production connections

Author: DrewImm

CHANGELOG.md

@@ -3,7 +3,7 @@
 ## [3.3.4] Mar-15-2021
 
 ### Fixes
-
+- Use SSL for postgres production connections
 
 ## [3.3.3]
 

src/database/postgres.ts

@@ -17,13 +17,15 @@ export class PointyPostgres extends BaseDb {
 	public connect(options?: string | Object): Promise<Connection> {
 		return new Promise(async (accept, reject) => {
 			let pgOptions: any;
+			let useSSL = false;
 
 			if (process.env.DATABASE_URL) {
 				// Live
 				pgOptions = PostgressConnectionStringParser.parse(
 					process.env.DATABASE_URL
 				);
 				pgOptions.type = 'postgres';
+				useSSL = true;
 
 				this.logger('Using production database');
 				this.logger(
@@ -52,8 +54,7 @@ export class PointyPostgres extends BaseDb {
 				this.shouldSync = true;
 			}
 
-			// Create connection
-			const conn = await createConnection(<ConnectionOptions>{
+			options = {
 				name: this.connectionName,
 				type: process.env.TYPEORM_DRIVER_TYPE || pgOptions.type,
 				driver: process.env.TYPEORM_DRIVER_TYPE || pgOptions.type,
@@ -66,11 +67,17 @@ export class PointyPostgres extends BaseDb {
 				synchronize: this.shouldSync,
 				uuidExtension: pgOptions.uuidExtension
 					? pgOptions.uuidExtension
-					: 'pgcrypto',
-				ssl: {
+					: 'pgcrypto'
+			};
+
+			if (useSSL) {
+				options['ssl'] = {
 					rejectUnauthorized: false
-				}
-			}).catch((error) => {
+				};
+			}
+
+			// Create connection
+			const conn = await createConnection(<ConnectionOptions>options).catch((error) => {
 				reject(error);
 				return false;
 			});