From 807319460425945731a81cb949866d562080249d Mon Sep 17 00:00:00 2001 From: Rafael Date: Tue, 2 Dec 2025 15:10:31 -0300 Subject: [PATCH] fix: make Redis TLS configurable via REDIS_TLS env var MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Change TLS check from ENV !== 'local' to REDIS_TLS === 'true' - Add REDIS_TLS env var to Helm deployment template - Default to true for OCI Redis, can override for self-hosted K8s 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- deploy/helm-chart/templates/deployment.yaml | 2 ++ deploy/helm-chart/values.yaml | 1 + environment.d.ts | 1 + src/services/service.module.ts | 2 +- 4 files changed, 5 insertions(+), 1 deletion(-) diff --git a/deploy/helm-chart/templates/deployment.yaml b/deploy/helm-chart/templates/deployment.yaml index 013aa06..63524f3 100644 --- a/deploy/helm-chart/templates/deployment.yaml +++ b/deploy/helm-chart/templates/deployment.yaml @@ -104,6 +104,8 @@ spec: value: {{ .Values.maestro.redis_host }} - name: REDIS_PORT value: "{{ .Values.maestro.redis_port }}" + - name: REDIS_TLS + value: "{{ .Values.maestro.redis_tls }}" - name: JWT_PRIVATE_KEY valueFrom: secretKeyRef: diff --git a/deploy/helm-chart/values.yaml b/deploy/helm-chart/values.yaml index 0c4db2e..2f703b7 100644 --- a/deploy/helm-chart/values.yaml +++ b/deploy/helm-chart/values.yaml @@ -48,6 +48,7 @@ maestro: redis_host: "aaapzppmlyamkocqwstpo7zvopczyyiyuy6xzm2g6c5k4mq3a66be4a-0.redis.sa-saopaulo-1.oci.oraclecloud.com" redis_port: "6379" redis_database: "0" + redis_tls: "true" cookie_secret: "13cc5e136d3074bcc05bec8697092ec1f5f376bf" autoscaling: enabled: false diff --git a/environment.d.ts b/environment.d.ts index 3b44250..85d1a52 100644 --- a/environment.d.ts +++ b/environment.d.ts @@ -16,6 +16,7 @@ declare global { OPEN_CUSTOMER_ID: string; DEDICATED_PROXY: string; COOKIE_SECRET: string; + REDIS_TLS?: string; } } } diff --git a/src/services/service.module.ts b/src/services/service.module.ts index 0286b01..8bf406d 100644 --- a/src/services/service.module.ts +++ b/src/services/service.module.ts @@ -14,7 +14,7 @@ import { redisStore } from 'cache-manager-ioredis-yet'; keyPrefix: 'maestro:sso', } - if (process.env.ENV !== 'local') { + if (process.env.REDIS_TLS === 'true') { baseRedisConfig['tls'] = { servername: process.env.REDIS_HOST, }