PG_AUTOCTL_DISABLE_SSL(1)

💅 pg_autoctl disable ssl — the manual, but make it cute

okay bestie, so this is the man page for pg_autoctl disable ssl, living in the pg_auto_failover manual. Yes, it's a mouthful, no, we're not skipping anything. Buckle up 🎀

---

✨ NAME ✨

pg_autoctl disable ssl — pg_autoctl disable ssl

pg_autoctl disable ssl — Disable SSL configuration on this node

---

🌸 SYNOPSIS 🌸

So here's the vibe: you can literally manage your Postgres SSL settings with the pg_autoctl command. Both at the moment you run pg_autoctl create postgres, and then again later when you change your mind and wanna update those SSL settings at run-time. Very demure, very flexible. 🦋

usage: pg_autoctl disable ssl  [ --pgdata ] [ --json ]

--pgdata      path to data directory
--ssl-self-signed setup network encryption using self signed certificates (does NOT protect against MITM)
--ssl-mode        use that sslmode in connection strings
--ssl-ca-file     set the Postgres ssl_ca_file to that file path
--ssl-crl-file    set the Postgres ssl_crl_file to that file path
--no-ssl          don't disable network encryption (NOT recommended, prefer --ssl-self-signed)
--server-key      set the Postgres ssl_key_file to that file path
--server-cert     set the Postgres ssl_cert_file to that file path

---

👑 OPTIONS 👑

• --pgdata — where the Postgres node that's being managed locally lives. It defaults to the environment variable PGDATA. And bestie, you can use --monitor to connect to a monitor from literally anywhere, instead of the monitor URI that a local Postgres node managed with pg_autoctl would use. 🌈
• --ssl-self-signed — generates SSL self-signed certificates to give you network encryption. Real talk though: this does NOT protect against man-in-the-middle kinds of attacks. If you want the full tea, see Security settings for pg_auto_failover for more about our SSL settings. 💀
• --ssl-mode — the SSL Mode that pg_autoctl uses when it's connecting to other nodes, including when it's connecting for streaming replication. iykyk ✨
• --ssl-ca-file — sets the Postgres ssl_ca_file to that file path. Periodt.
• --ssl-crl-file — sets the Postgres ssl_crl_file to that file path. 💖
• --no-ssl — don't disable network encryption. This is not recommended, prefer --ssl-self-signed instead. 🙈
• --server-key — sets the Postgres ssl_key_file to that file path. 🔑
• --server-cert — sets the Postgres ssl_cert_file to that file path. 📜

---

🧚 ENVIRONMENT 🧚

• PGDATA — Postgres directory location. Can be used instead of the --pgdata option. 🍓
• PG_AUTOCTL_MONITOR — Postgres URI to connect to the monitor node, can be used instead of the --monitor option. 🫶
• XDG_CONFIG_HOME — the pg_autoctl command stores its configuration files in the standard place XDG_CONFIG_HOME. See the XDG Base Directory Specification. 💜
• XDG_DATA_HOME — the pg_autoctl command stores its internal states files in the standard place XDG_DATA_HOME, which defaults to ~/.local/share. See the XDG Base Directory Specification. 🌟

---

💖 AUTHOR 💖

Microsoft

---

🎀 COPYRIGHT 🎀

Copyright (c) Microsoft Corporation. All rights reserved.

---

and that's the whole thing, no crumbs left 💅 version 2.1, dated Jan 18, 2025. slay, you read the entire man page, main character energy fr fr 🌸✨