Merge pull request #1540 from input-output-hk/remove_tls

chore: remove tls

Author: bernokl

nix/cardano-services/deployments/asset.nix

@@ -48,8 +48,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL_ASSET = "true";
-      POSTGRES_SSL_CA_FILE_ASSET = "/tls/ca.crt";
     };
   };
 
@@ -88,8 +86,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL = "true";
-      POSTGRES_SSL_CA_FILE = "/tls/ca.crt";
     };
   };
 }

nix/cardano-services/deployments/backend.provider.nix

@@ -58,8 +58,6 @@
             key = "username";
           };
         };
-        POSTGRES_SSL_DB_SYNC = "true";
-        POSTGRES_SSL_CA_FILE_DB_SYNC = "/tls/ca.crt";
       }
       // lib.optionalAttrs values.backend.passHandleDBArgs {
         POSTGRES_POOL_MAX_HANDLE = "10";
@@ -78,8 +76,6 @@
             key = "username";
           };
         };
-        POSTGRES_SSL_HANDLE = "true";
-        POSTGRES_SSL_CA_FILE_HANDLE = "/tls/ca.crt";
       };
   };
 }

nix/cardano-services/deployments/blockfrost-worker-deployment.nix

@@ -64,18 +64,9 @@
                     key = "username";
                   };
                 };
-                POSTGRES_SSL_DB_SYNC = "true";
-                POSTGRES_SSL_CA_FILE_DB_SYNC = "/tls/ca.crt";
               };
-              volumeMounts = [
-                {
-                  mountPath = "/tls";
-                  name = "tls";
-                }
-              ];
             }
           ];
-          volumes.tls.secret.secretName = "postgresql-server-cert";
         };
       };
     };

nix/cardano-services/deployments/chain-history.nix

@@ -51,8 +51,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL_DB_SYNC = "true";
-      POSTGRES_SSL_CA_FILE_DB_SYNC = "/tls/ca.crt";
     };
   };
 }

nix/cardano-services/deployments/handle.nix

@@ -46,8 +46,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL_HANDLE = "true";
-      POSTGRES_SSL_CA_FILE_HANDLE = "/tls/ca.crt";
     };
   };
 
@@ -88,8 +86,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL = "true";
-      POSTGRES_SSL_CA_FILE = "/tls/ca.crt";
     };
   };
 }

nix/cardano-services/deployments/pg-boss-worker-deployment.nix

@@ -66,8 +66,6 @@
                     key = "username";
                   };
                 };
-                POSTGRES_SSL_STAKE_POOL = "true";
-                POSTGRES_SSL_CA_FILE_STAKE_POOL = "/tls/ca.crt";
 
                 POSTGRES_POOL_MAX_DB_SYNC = "5";
                 POSTGRES_HOST_DB_SYNC = values.postgresName;
@@ -85,21 +83,12 @@
                     key = "username";
                   };
                 };
-                POSTGRES_SSL_DB_SYNC = "true";
-                POSTGRES_SSL_CA_FILE_DB_SYNC = "/tls/ca.crt";
               }
               // lib.optionalAttrs (values.pg-boss-worker ? env) values.pg-boss-worker.env
               // lib.optionalAttrs (values.pg-boss-worker.metadata-fetch-mode == "smash") {
                 SMASH_URL = values.pg-boss-worker.smash-url;
               });
-            volumeMounts = [
-              {
-                mountPath = "/tls";
-                name = "tls";
-              }
-            ];
           };
-          volumes.tls.secret.secretName = "postgresql-server-cert";
         };
       };
     };

nix/cardano-services/deployments/projector.resource.nix

@@ -79,15 +79,7 @@ in {
                   runAsUser = 0;
                   runAsGroup = 0;
                 };
-
-                volumeMounts = [
-                  {
-                    name = "tls";
-                    mountPath = "/tls";
-                  }
-                ];
               };
-              volumes.tls.secret.secretName = "postgresql-server-cert";
             };
           };
         };

nix/cardano-services/deployments/provider.resource.nix

@@ -88,14 +88,7 @@ in {
                   runAsGroup = 0;
                 };
 
-                volumeMounts = [
-                  {
-                    name = "tls";
-                    mountPath = "/tls";
-                  }
-                ];
               };
-              volumes.tls.secret.secretName = "postgresql-server-cert";
             };
           };
         };

nix/cardano-services/deployments/stake-pool.nix

@@ -49,8 +49,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL_STAKE_POOL = "true";
-      POSTGRES_SSL_CA_FILE_STAKE_POOL = "/tls/ca.crt";
     };
   };
 
@@ -90,8 +88,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL = "true";
-      POSTGRES_SSL_CA_FILE = "/tls/ca.crt";
     };
   };
 }

nix/cardano-services/deployments/wallet-api.nix

@@ -40,8 +40,6 @@
           key = "username";
         };
       };
-      POSTGRES_SSL = "true";
-      POSTGRES_SSL_CA_FILE = "/tls/ca.crt";
     };
   };
 }