OPS-6085-allow-encrypted-db-connection (#159)

Added option to enable SSL for the database connection.

src/config.js

@@ -14,6 +14,7 @@ exports.DB_DATABASE = process.env.DB_DATABASE;
 exports.DB_USERNAME = process.env.DB_USERNAME;
 exports.DB_PASSWORD = process.env.DB_PASSWORD;
 exports.DB_PORT = process.env.DB_PORT || 5432;
+exports.DB_SSL = process.env.DB_SSL?.toLowerCase?.() === 'true';
 exports.CONNECTION_POOL_SIZE = process.env.CONNECTION_POOL_SIZE || 10;
 exports.DB_IDLE_TIMEOUT_MILLIS = process.env.DB_IDLE_TIMEOUT_MILLIS;
 exports.DB_MAX_USES = process.env.DB_MAX_USES;

src/infrastructure/databasePromise.js

@@ -9,6 +9,7 @@ const resolveDBCredentials = () => {
 		const db_host = config.DB_HOST;
 		const db_port = config.DB_PORT;
 		const db_database = config.DB_DATABASE;
+		const db_ssl = config.DB_SSL;
 
 		if (!db_username ||
 			(config.NODE_ENV === 'production' && !db_password) ||
@@ -25,13 +26,15 @@ const resolveDBCredentials = () => {
 				host: db_host,
 				port: db_port,
 				database: db_database,
+				ssl: db_ssl,
 			};
 		} else {
 			db = {
 				user: db_username,
 				host: db_host,
 				port: db_port,
 				database: db_database,
+				ssl: db_ssl,
 			};
 		}
 	} else {
@@ -41,12 +44,12 @@ const resolveDBCredentials = () => {
 			host: 'localhost',
 			port: 5432,
 			database: 'schulcloud_calendar',
+			ssl: false, //default
 		};
 	}
 	// https://github.com/vitaly-t/pg-promise/wiki/Connection-Syntax#configuration-object
 	// https://www.npmjs.com/package/pg-pool
 	// https://docs.hpi-schul-cloud.org/display/CARCH/Open+Issues+Scalability+and+Stabilization
-	// db.ssl = true;
 	// db.connectionTimeoutMillis = 1000;
 	// db.min = config.CONNECTION_POOL_SIZE_MIN; // validate if it is exist
 	if (config.DB_IDLE_TIMEOUT_MILLIS) {