PG_AUTOCTL DISABLE SSL(1)

💅 pg_autoctl disable ssl — the glow-down of your SSL setup

okay bestie, so this is the manual page for pg_autoctl disable ssl, part of pg_auto_failover, and no cap it's literally just: "turn off the SSL config on this node." That's it. That's the whole vibe. 🦋

NAME

pg_autoctl disable ssl — pg_autoctl disable ssl

pg_autoctl disable ssl — Disable SSL configuration on this node

---

✨ SYNOPSIS ✨

so here's the tea 🫖 — you can manage your Postgres SSL settings with the pg_autoctl command, both at pg_autoctl create postgres time and later on, when you change your mind and wanna update those SSL settings at run-time. main character energy: you get to decide twice. 👑

usage: pg_autoctl disable ssl  [ --pgdata ] [ --json ]

--pgdata      path to data directory
--ssl-self-signed setup network encryption using self signed certificates (does NOT protect against MITM)
--ssl-mode        use that sslmode in connection strings
--ssl-ca-file     set the Postgres ssl_ca_file to that file path
--ssl-crl-file    set the Postgres ssl_crl_file to that file path
--no-ssl          don't disable network encryption (NOT recommended, prefer --ssl-self-signed)
--server-key      set the Postgres ssl_key_file to that file path
--server-cert     set the Postgres ssl_cert_file to that file path

---

🎀 OPTIONS 🎀

one bullet per flag, we do not skip, we do not summarise, we are thorough and that's iconic 💖

• --pgdata — where the Postgres node being managed locally lives. Defaults to the environment variable PGDATA. Use --monitor if you wanna connect to a monitor from literally anywhere, instead of the monitor URI that a local Postgres node managed with pg_autoctl uses. 🌸
• --ssl-self-signed — generate SSL self-signed certificates so you get network encryption. Heads up bestie: this does not protect against man-in-the-middle kinds of attacks. Go read Security settings for pg_auto_failover if you want more about our SSL settings. 🙈
• --ssl-mode — the SSL Mode pg_autoctl uses when it's connecting to other nodes, including when it's connecting for streaming replication. 🔥
• --ssl-ca-file — set the Postgres ssl_ca_file to that file path. 📁
• --ssl-crl-file — set the Postgres ssl_crl_file to that file path. 📁
• --no-ssl — don't disable network encryption. This is not recommended, prefer --ssl-self-signed. (yes, that's what it says. we are simply relaying the lore. 💀)
• --server-key — set the Postgres ssl_key_file to that file path. 🔑
• --server-cert — set the Postgres ssl_cert_file to that file path. 📜

---

🌈 ENVIRONMENT 🌈

the env vars, the moment you've all been waiting for 🫶

• PGDATA — Postgres directory location. Can be used instead of the --pgdata option.
• PG_AUTOCTL_MONITOR — Postgres URI to connect to the monitor node, can be used instead of the --monitor option.
• XDG_CONFIG_HOME — the pg_autoctl command stores its configuration files in the standard place XDG_CONFIG_HOME. See the XDG Base Directory Specification.
• XDG_DATA_HOME — the pg_autoctl command stores its internal states files in the standard place XDG_DATA_HOME, which defaults to ~/.local/share. See the XDG Base Directory Specification.

---

👑 AUTHOR 👑

Microsoft

💜 COPYRIGHT 💜

Copyright (c) Microsoft Corporation. All rights reserved.

---

and that's the whole page, bestie. go forth, disable that SSL, be safe about it (seriously — --ssl-self-signed over --no-ssl, we beg you 😭).

k byeee 💖✨ — this was pg_autoctl disable ssl, version 2.2, dated Apr 07, 2025, from the pg_auto_failover manual. slay. 🎀🦋🌸