Neither the Fly proxy nor HAProxy understands pgsql, which means we are not able to handle TLS termination in the same way we do for other apps. We need to decide whether to use something like Stunnel to handle termination or work to inject certificates as secrets and just have Postgres handle it.
Neither the Fly proxy nor HAProxy understands
pgsql, which means we are not able to handle TLS termination in the same way we do for other apps. We need to decide whether to use something like Stunnel to handle termination or work to inject certificates as secrets and just have Postgres handle it.