Final save before migration

streaming/index.js

@@ -109,6 +109,11 @@ const pgConfigFromEnv = (env) => {
     },
   };
 
+  if (!!process.env.DB_SSLMODE && process.env.DB_SSLMODE !== 'disable') {
+    pgConfigs.development.ssl = true;
+    pgConfigs.production.ssl = {ca: fs.readFileSync("ca-certificate.crt") };
+  }
+
   let baseConfig;
 
   if (env.DATABASE_URL) {
@@ -132,7 +137,7 @@ const pgConfigFromEnv = (env) => {
         baseConfig.ssl = { rejectUnauthorized: false };
         break;
       default:
-        baseConfig.ssl = {};
+        baseConfig.ssl = { rejectUnauthorized: false };
         break;
       }
     }