SSL Setup

All PhoenixDB connections are encrypted with SSL by default.

SSL is Always Enabled

PhoenixDB uses wildcard Let's Encrypt certificates for all database connections. SSL is automatically configured — no manual setup required.

PostgreSQL supports several SSL modes. Here's how they work with PhoenixDB:

Mode	Description	Recommended
require	Encrypt connection, don't verify certificate
prefer	Use SSL if available, fallback to plain	—
verify-ca	Verify server certificate is signed by trusted CA	—
verify-full	Verify certificate and hostname match	—
disable	No encryption (not supported)	✗

Recommendation: Use sslmode=require for the best balance of security and compatibility.

Using node-postgres

const { Pool } = require('pg');

const pool = new Pool({
  connectionString: process.env.DATABASE_URL,
  ssl: { rejectUnauthorized: false }
});

Using psycopg2-binary

import psycopg2
import os

conn = psycopg2.connect(
    os.environ['DATABASE_URL'],
    sslmode='require'
)

config/database.php

'pgsql' => [
    'driver' => 'pgsql',
    'url' => env('DATABASE_URL'),
    'sslmode' => 'require',
],

All PhoenixDB servers use wildcard Let's Encrypt certificates for the*.phoenixdb.space domain.

Certificates are automatically renewed before expiration. No action required on your part.