From 1d08e492eb8fd72785ee688cb363073d0df78ad1 Mon Sep 17 00:00:00 2001 From: xhon-pelushi Date: Wed, 12 Aug 2026 20:59:42 -0400 Subject: [PATCH] docs: add SSL verification example for PostgreSQL Fixes #13838 Signed-off-by: xhon-pelushi --- .../linux_database_configuration.rst | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/admin_manual/configuration_database/linux_database_configuration.rst b/admin_manual/configuration_database/linux_database_configuration.rst index 3acae2d4c6d..67196159d06 100644 --- a/admin_manual/configuration_database/linux_database_configuration.rst +++ b/admin_manual/configuration_database/linux_database_configuration.rst @@ -292,6 +292,26 @@ this: "dbhost" => "localhost", "dbtableprefix" => "oc_", +SSL for PostgreSQL Database +^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +Enabling SSL is only necessary if your database does not reside on the same server as your Nextcloud instance. +If you do not connect over localhost and need to allow remote connections then you should enable SSL. +This just covers the SSL database configuration on the Nextcloud server. First you need to configure your database server accordingly. + +:: + + 'pgsql_ssl' => [ + 'mode' => 'verify-ca', + 'cert' => '/../ssl-cert.pem', + 'key' => '/../ssl-key.pem', + 'crl' => '', + 'rootcert' => '/../ca-cert.pem', + ], + +Adjust the paths to the pem files for your environment. ``mode`` accepts the same values as PostgreSQL's +``sslmode`` connection parameter (for example ``require``, ``verify-ca`` or ``verify-full``). + .. _db-troubleshooting-label: Troubleshooting