From dd0ca4b4f11aeea815a0657c4c9a430440b4718d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Luk=C3=A1=C5=A1=20Trkan?= Date: Thu, 2 Oct 2025 15:10:09 +0200 Subject: [PATCH] fix(infrastructure): alembic - use SSL for DB connection --- backend/alembic/env.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/backend/alembic/env.py b/backend/alembic/env.py index 5abb36a..ec52aab 100644 --- a/backend/alembic/env.py +++ b/backend/alembic/env.py @@ -23,9 +23,10 @@ if not DATABASE_URL: mariadb_password = os.getenv("MARIADB_PASSWORD", "strongpassword") DATABASE_URL = f"mysql+pymysql://{mariadb_user}:{mariadb_password}@{mariadb_host}:{mariadb_port}/{mariadb_db}" -# Use synchronous driver for Alembic migrations SYNC_DATABASE_URL = DATABASE_URL.replace("+asyncmy", "+pymysql") +ssl_enabled = os.getenv("MARIADB_HOST", "localhost") != "localhost" +connect_args = {"ssl": {"ssl": True}} if ssl_enabled else {} def run_migrations_offline() -> None: context.configure( @@ -39,7 +40,7 @@ def run_migrations_offline() -> None: def run_migrations_online() -> None: - connectable = create_engine(SYNC_DATABASE_URL, poolclass=pool.NullPool) + connectable = create_engine(SYNC_DATABASE_URL, poolclass=pool.NullPool, connect_args=connect_args) with connectable.connect() as connection: context.configure( connection=connection,