Setting up Plausible in AWS ECS + RDS (Aurora Postgres) #4600
-
|
Hi everyone, I tried: Here's my env variable config: My command in the plausible ECS instance is: Logs: I've tried different things mentioned in the Issues section but haven't had any success. I also tried disabling SSL by doing But I get a different error: From what I researched |
Beta Was this translation helpful? Give feedback.
Replies: 5 comments 20 replies
-
|
The second error means creating databases is forbidden. Which makes sense since RDS doesn't allow creating databases via SQL -- instead, that is done through their dashboard UI or AWS API. |
Beta Was this translation helpful? Give feedback.
-
|
The database already exists. I created it manually with the whole migrations. but this is what I got: |
Beta Was this translation helpful? Give feedback.
-
|
Note that I also tried using the root user and the error persists |
Beta Was this translation helpful? Give feedback.
-
|
Please get your DB env vars from the container and compare them to RDS creds. It would probably be easier to start with ssl=false :) |
Beta Was this translation helpful? Give feedback.
-
|
Also can you please check that SNI in the cert is the same as in your |
Beta Was this translation helpful? Give feedback.
-
|
I'm not sure how to configure that in RDS. I'll see if I can find some info on that. As for the region it should be the right one according to their docs: |
Beta Was this translation helpful? Give feedback.
-
|
You would need to get SNI / hostname from the certificate to be sure. |
Beta Was this translation helpful? Give feedback.
-
|
ok let me try that |
Beta Was this translation helpful? Give feedback.
-
|
Ran this from a container and it seemed to connect with the pem file provided: Note I manually created these tables |
Beta Was this translation helpful? Give feedback.
-
|
I found out that SSL=false wont work because RDS automatically sets the SSL mode to forced
I also ran this on the DB: |
Beta Was this translation helpful? Give feedback.
-
|
Actually, v26 is also using depth=10 by default, so that's unlikely to be the problem. |
Beta Was this translation helpful? Give feedback.
-
|
I'll run some manual checks on RDS with Erlang's I haven't tried it, but I think something like this should work: my_config.exs import Config
config :plausible, Plausible.Repo,
ssl_opts: [
depth: 10,
server_name_indication: ~c"plausible.abcdefghi.us-east-1.rds.amazonaws.com"
] |
Beta Was this translation helpful? Give feedback.
-
|
oh nice find! Thanks @ruslandoga! |
Beta Was this translation helpful? Give feedback.
-
|
I tried Mix.install [{:postgrex, "0.17.5"}]
Postgrex.start_link(
hostname: "plausible.c16quuxxxx.eu-north-1.rds.amazonaws.com",
port: 5432,
username: "plausible",
password: "xxx",
database: "plausible",
show_sensitive_data_on_connection_error: true,
ssl: true,
ssl_opts: [
verify: :verify_peer,
cacertfile: ~c"/Users/x/Desktop/eu-north-1-bundle.pem",
depth: 10,
server_name_indication: ~c"plausible.c16quuxxxx.eu-north-1.rds.amazonaws.com",
customize_hostname_check: [match_fun: :public_key.pkix_verify_hostname_match_fun(:https)]
]
)and it seems to work. Commenting out |
Beta Was this translation helpful? Give feedback.
-
|
In v2.1.1 Plausible was settings the following TLS options by default (and was missing SNI): https://github.com/plausible/analytics/blob/v2.1.1/config/runtime.exs#L330-L336 The rest would need to be provided via extra config: #4600 (reply in thread) The only option missing seems to be import Config
%URI{hostname: pg_hostname} = URI.parse(System.fetch_env!("DATABASE_URL"))
config :plausible, Plausible.Repo,
ssl_opts: [server_name_indication: String.to_charlist(pg_hostname)] In v2.1.2 (to be released soon: #4483), this would work automatically and no extra configuration is necessary. |
Beta Was this translation helpful? Give feedback.
-
|
oh amazing! |
Beta Was this translation helpful? Give feedback.
I'll run some manual checks on RDS with Erlang's
:ssland come back with configuration that works.You would then be able to set it with extra config: #3906
I haven't tried it, but I think something like this should work:
my_config.exs