From 651471a961bedb55981543b19349719fff5a6785 Mon Sep 17 00:00:00 2001
From: Vyacheslav Matyukhin <me@berekuk.ru>
Date: Tue, 12 Apr 2022 11:57:14 +0300
Subject: [PATCH] ops: remove sslmode=require from pg uri

---
 tf/main.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tf/main.tf b/tf/main.tf
index d54a746..18dd6c0 100644
--- a/tf/main.tf
+++ b/tf/main.tf
@@ -44,7 +44,8 @@ resource "digitalocean_database_cluster" "metaforecast_db" {
 
 locals {
   generated_env = merge(var.metaforecast_env, {
-    DIGITALOCEAN_POSTGRES = digitalocean_database_cluster.metaforecast_db.uri
+    # should we bring proper DO certificates to prod instead?
+    DIGITALOCEAN_POSTGRES = replace(digitalocean_database_cluster.metaforecast_db.uri, "/\\?sslmode=require$/", "")
   })
 }