From 6c7281ae889976c1b33b87231c4bbeda36d88796 Mon Sep 17 00:00:00 2001
From: jonaswinkler <jonas.winkler@jpwinkler.de>
Date: Sun, 10 Jan 2021 01:35:56 +0100
Subject: [PATCH] add sslmode configuration option fixes #298

---
 docs/configuration.rst    | 6 ++++++
 paperless.conf.example    | 1 +
 src/paperless/settings.py | 1 +
 3 files changed, 8 insertions(+)

diff --git a/docs/configuration.rst b/docs/configuration.rst
index d122216a1..4828c4fa5 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -53,6 +53,12 @@ PAPERLESS_DBPASS=<password>
 
     Defaults to "paperless".
 
+PAPERLESS_DBSSLMODE=<mode>
+    SSL mode to use when connecting to PostgreSQL.
+
+    See `the official documentation about sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html>`_.
+
+    Default is ``prefer``.
 
 Paths and folders
 #################
diff --git a/paperless.conf.example b/paperless.conf.example
index 50d79c720..7e6185765 100644
--- a/paperless.conf.example
+++ b/paperless.conf.example
@@ -13,6 +13,7 @@
 #PAPERLESS_DBNAME=paperless
 #PAPERLESS_DBUSER=paperless
 #PAPERLESS_DBPASS=paperless
+#PAPERLESS_DBSSLMODE=prefer
 
 # Paths and folders
 
diff --git a/src/paperless/settings.py b/src/paperless/settings.py
index d0e32b4a0..f2f1a45b1 100644
--- a/src/paperless/settings.py
+++ b/src/paperless/settings.py
@@ -253,6 +253,7 @@ if os.getenv("PAPERLESS_DBHOST"):
         "NAME": os.getenv("PAPERLESS_DBNAME", "paperless"),
         "USER": os.getenv("PAPERLESS_DBUSER", "paperless"),
         "PASSWORD": os.getenv("PAPERLESS_DBPASS", "paperless"),
+        'OPTIONS': {'sslmode': os.getenv("PAPERLESS_DBSSLMODE", "prefer")},
     }
     if os.getenv("PAPERLESS_DBPORT"):
         DATABASES["default"]["PORT"] = os.getenv("PAPERLESS_DBPORT")