how to add tls cert for pgbouncer

[riker1]

I want to use SSL for my pgbouncer connection and I see that I've got a line for pgbouncer_client_tls_key_file and pgbouncer_client_tls_cert_file.

I am not using consul but I noticed that there's a ref to You can enable TLS encryption by dropping a CA certificate, server certificate, and server key in roles/consul/files/

should I create a files folder in the pgbouncer role? if so would I reference it as {{ roles/pgbouncer/files/cert.crt etc?

thanks in advance --est2

[riker1]

I think I answered my own question 😅

I see under the system variables that I can reference my certs which will then copy them to all nodes. Then I can reference them in the sections requiring TLS certs.

now if I could only figure out why I cannot get pgbackrest to work with my cluster... i'd be home free! 😊

[vitabaks]

Hi @riker1 !

Yes, Just upload any files to the files directory (including certificates) and then define them in the copy_files_to_all_server variable so that they are copied to the right place and with the right permissions.

[vitabaks]

now if I could only figure out why I cannot get pgbackrest to work with my cluster

Please open a new discussion or issue on this problem and describe the details, I will be happy to help.

[riker1]

ok, i just need to get my thoughts together!