add support for postgres sslmode

capsulflask/__init__.py

@@ -27,6 +27,10 @@ app.config.from_mapping(
   ADMIN_EMAIL_ADDRESSES=os.environ.get("ADMIN_EMAIL_ADDRESSES", default="ops@cyberia.club"),
 
   DATABASE_URL=os.environ.get("DATABASE_URL", default="sql://postgres:dev@localhost:5432/postgres"),
+
+  # https://www.postgresql.org/docs/9.1/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS
+  DATABASE_SSLMODE=os.environ.get("DATABASE_SSLMODE", default="prefer"), 
+
   DATABASE_SCHEMA=os.environ.get("DATABASE_SCHEMA", default="public"),
 
   MAIL_SERVER=os.environ.get("MAIL_SERVER", default="m1.nullhex.com"),

capsulflask/db.py

@@ -20,7 +20,8 @@ def init_app(app):
     password = databaseUrl.password,
     host = databaseUrl.hostname,
     port = databaseUrl.port,
-    database = databaseUrl.path[1:]
+    database = databaseUrl.path[1:],
+    sslmode = app.config['DATABASE_SSLMODE']
   )
 
   schemaMigrations = {}