You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/quick-start/connecting-mysql/page.md
+49Lines changed: 49 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,6 +41,55 @@ DB_DIALECT=mysql
41
41
DB_CHARSET=utf8 #(optional)
42
42
```
43
43
44
+
### TLS/SSL Configuration
45
+
46
+
GoFr supports secure TLS connections to MySQL/MariaDB databases. Configure TLS by setting the `DB_SSL_MODE` environment variable and optionally providing certificate paths for enhanced security.
47
+
48
+
#### Available SSL Modes
49
+
50
+
| SSL Mode | Description |
51
+
|----------|-------------|
52
+
|`disable`| No TLS encryption (default) |
53
+
|`preferred`| Attempts TLS, falls back to plain connection if unavailable |
54
+
|`require`| Enforces TLS but skips certificate validation |
55
+
|`skip-verify`| Enforces TLS without validating server certificate |
56
+
|`verify-ca`| Enforces TLS and validates server certificate against CA |
57
+
|`verify-full`| Enforces TLS with full certificate validation (including hostname) |
58
+
59
+
#### TLS Environment Variables
60
+
61
+
| Variable | Required | Description |
62
+
|----------|----------|-------------|
63
+
|`DB_SSL_MODE`| No | TLS mode (defaults to `disable`) |
64
+
|`DB_TLS_CA_CERT`| Conditional | Path to CA certificate (required for `verify-ca`/`verify-full`) |
65
+
|`DB_TLS_CLIENT_CERT`| No | Path to client certificate (for mutual TLS) |
66
+
|`DB_TLS_CLIENT_KEY`| No | Path to client private key (for mutual TLS) |
0 commit comments