Use pg Pool options instead of connection string for geo DB

Shipped

April 17, 2026 at 11:20 PM UTC

Author

Kamo

Commit

678cd66

CockroachDB rejects insecure connections and node-pg can't verify self-signed certs via connection string alone. Parse the URL into Pool options and pass ssl:{rejectUnauthorized:false} when sslmode != disable. Also switch GEO_DATABASE_URL to secretKeyRef from analytics-secret so the password (URL-encoded) is not committed to the repo.