Allow Postgres DB connection to enable SSL

[hardillb]

part of FlowFuse/helm#151

This should make sequelize try and connect with SSL first then fall back to plain.

Description

This should make sequelize try and connect with SSL first then fall back to plain.

Shouldn't need a doc upgrade as this should "just work"

Likewise this shouldn't need a test change

Related Issue(s)

FlowFuse/helm#151

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on flowforge/helm to update ConfigMap Template
  • Issue/PR raised on flowforge/CloudProject to update values for Staging/Production

Labels

• Backport needed? -> add the backport label
• Includes a DB migration? -> add the area:migration label

[codecov]

Codecov Report

Merging #2500 (5a82958) into main (7d58f58) will increase coverage by 72.80%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##            main    #2500       +/-   ##
==========================================
+ Coverage   1.55%   74.35%   +72.80%     
==========================================
  Files        489      224      -265     
  Lines      17133     8852     -8281     
  Branches    3976     1823     -2153     
==========================================
+ Hits         266     6582     +6316     
+ Misses     16867     2270    -14597     

Flag	Coverage Δ
backend	74.35% <0.00%> (?)
frontend	?

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
forge/db/index.js	65.51% <0.00%> (+65.51%)	⬆️

... and 441 files with indirect coverage changes

[hardillb]

Chain of docs to follow:

https://sequelize.org/docs/v6/other-topics/dialect-specific-things/#postgresql
https://node-postgres.com/features/ssl
https://www.postgresql.org/docs/11/libpq-connect.html#id-1.7.3.8.3.6

[hardillb]

Tested the option with:

const {Sequelize} = require('sequelize')

const dbOptions = {
	dialect: 'postgres',
	host: 'xxxx.8nj.cockroachlabs.cloud',
	port: 26257,
	username: 'xxx',
	password: 'xxxxxxxxxx',
	database: 'flowforge',
	dialectOptions: {
		ssl: {
			sslmode: 'prefer'
		}
	}
}

const sequelize = new Sequelize(dbOptions)

sequelize.authenticate()
.then(() => {
  console.log("connected")
})
.catch((err) => {
  console.log(err)
})

I have since shutdown the test cockroach db instance, but can spin up another free one if needed.

[hardillb]

OK, this isn't doing what the docs suggest it should, sslmode: 'prefer' is supposed to gracefully fall back.

[hardillb]

I've made this a simple toggle for now as the fallback options doesn't appear to have been implemented in the nodejs PG driver.

brianc/node-postgres#2720

[Pezmc]

Seems sensible