From ebf7d59e3020fae995db3b9b4d003a378e3bdcb5 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Mon, 31 Jul 2023 10:58:18 -0700
Subject: [PATCH] Require SSL for database connection

---
 lib/fudo/grafana.nix                           | 1 +
 lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/fudo/grafana.nix b/lib/fudo/grafana.nix
index 434236c..2581f1d 100644
--- a/lib/fudo/grafana.nix
+++ b/lib/fudo/grafana.nix
@@ -231,6 +231,7 @@ in {
             user = cfg.database.user;
             password = "$__file{${cfg.database.password-file}}";
             type = "postgres";
+            ssl_mode = "require";
           };
 
           "ldap.auth" = mkIf (cfg.ldap != null) (let
diff --git a/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh b/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
index 76fc4ed..f93de99 100755
--- a/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
+++ b/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
@@ -1,3 +1,3 @@
 #!/bin/bash
 set -o errexit
-exec rspamc -h /run/rspamd/worker-controller.sock learn_ham
\ No newline at end of file
+exec rspamc -h /run/rspamd/worker-controller.sock learn_ham