fix(core): Add support for in-transit encryption (TLS) on Redis conne…

…ctions
n8n-io · Aug 30, 2023 · c879d2c · c879d2c
1 parent dfe0fa6
commit c879d2c
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/packages/cli/src/config/schema.ts b/packages/cli/src/config/schema.ts
@@ -399,6 +399,12 @@ export const schema = {
 					default: '',
 					env: 'QUEUE_BULL_REDIS_CLUSTER_NODES',
 				},
+				tls: {
+					format: 'Boolean',
+					default: false,
+					env: 'QUEUE_BULL_REDIS_TLS',
+					doc: 'Enable TLS on Redis connections. Default: false',
+				},
 			},
 			queueRecoveryInterval: {
 				doc: 'If > 0 enables an active polling to the queue that can recover for Redis crashes. Given in seconds; 0 is disabled. May increase Redis traffic significantly.',

diff --git a/packages/cli/src/services/redis/RedisServiceHelper.ts b/packages/cli/src/services/redis/RedisServiceHelper.ts
@@ -55,6 +55,7 @@ export function getRedisStandardClient(
 		enableReadyCheck: false,
 		maxRetriesPerRequest: null,
 	};
+	if (config.getEnv('queue.bull.redis.tls')) sharedRedisOptions.tls = {};
 	LoggerProxy.debug(
 		`Initialising Redis client${redisType ? ` of type ${redisType}` : ''} connection with host: ${
 			host ?? 'localhost'
@@ -101,6 +102,7 @@ export function getRedisClusterClient(
 		enableReadyCheck: false,
 		maxRetriesPerRequest: null,
 	};
+	if (config.getEnv('queue.bull.redis.tls')) sharedRedisOptions.tls = {};
 	LoggerProxy.debug(
 		`Initialising Redis cluster${
 			redisType ? ` of type ${redisType}` : ''