4.7. Connecting the Manager and Agents to Instances via SSL #

During or after installing PPEM, you can enable the manager and agents to connect to instances via SSL. To do this, specify the following parameters in the ppem-manager.yml manager or ppem-agent.yml agent configuration file:

  • Manager parameters:

    • repo.sslmode

    • repo.sslrootcert

    • repo.sslcert

    • repo.sslkey

  • Agent parameters:

    • agent.instance.connection_defaults.sslmode

    • agent.instance.connection_defaults.sslrootcert

    • agent.instance.connection_defaults.sslcert

    • agent.instance.connection_defaults.sslkey

Important

PPEM does not support encrypted SSL keys configured using the sslpassword parameter.

For the parameter description, refer to the official Postgres Pro documentation.