From cfdfed7e54c0b5c7d613b7f607a3cd948c0fe9d9 Mon Sep 17 00:00:00 2001
From: TULCHINSKI LIRAN <lira.tulchin@gmail.com>
Date: Wed, 5 Aug 2026 12:03:30 +0300
Subject: [PATCH 1/2] helm: update ngixn version

---
 helm/Chart.lock  | 6 +++---
 helm/Chart.yaml  | 2 +-
 helm/values.yaml | 4 ++++
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/helm/Chart.lock b/helm/Chart.lock
index c38406a..19a84ab 100644
--- a/helm/Chart.lock
+++ b/helm/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
   version: 1.0.1
 - name: nginx
   repository: oci://acrarolibotnonprod.azurecr.io/helm/common
-  version: 2.2.1
-digest: sha256:2c86149043507db63949ea9d1b0f077b2965806c1fa8872d353c7fe1b79e3d88
-generated: "2026-06-24T11:21:58.437838414+03:00"
+  version: 2.3.1
+digest: sha256:e41f5a977dcdf2ea1745a58db5cf198d196194eb7e224e1aaad9dd0b1c625340
+generated: "2026-08-05T10:31:40.600536008+03:00"
diff --git a/helm/Chart.yaml b/helm/Chart.yaml
index c435427..bc8644d 100644
--- a/helm/Chart.yaml
+++ b/helm/Chart.yaml
@@ -9,5 +9,5 @@ dependencies:
     version: 1.0.1
     repository: oci://acrarolibotnonprod.azurecr.io/helm/infra
   - name: nginx
-    version: 2.2.1
+    version: 2.3.1
     repository: oci://acrarolibotnonprod.azurecr.io/helm/common
diff --git a/helm/values.yaml b/helm/values.yaml
index 3a7aede..dd460fa 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -154,6 +154,10 @@ nginx:
     token:
       queryName: token
 
+  backend:
+    host: localhost
+    port: 8080
+
   route:
     enabled: true
     # routesMapping:

From 033628a153fc81c52f5ef0fb58a133f00dbe3c9a Mon Sep 17 00:00:00 2001
From: TULCHINSKI LIRAN <lira.tulchin@gmail.com>
Date: Sun, 27 Sep 2026 16:43:20 +0300
Subject: [PATCH 2/2] refactor: support certificate optional

---
 helm/templates/configmap.yaml | 2 ++
 src/DAL/connectionOptions.ts  | 2 +-
 src/common/interfaces.ts      | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/helm/templates/configmap.yaml b/helm/templates/configmap.yaml
index f5d8f23..b4d7fba 100644
--- a/helm/templates/configmap.yaml
+++ b/helm/templates/configmap.yaml
@@ -42,6 +42,8 @@ data:
   DB_NAME: {{ $postgres.name | quote }}
   DB_CERT_PATH: /tmp/certs/{{ $postgres.ssl.certFileName }}
   DB_KEY_PATH: /tmp/certs/{{ $postgres.ssl.keyFileName }}
+  {{- if $postgres.ssl.caFileName }}
   DB_CA_PATH: /tmp/certs/{{ $postgres.ssl.caFileName }}
+  {{- end }}
   DB_ENABLE_SSL_AUTH: {{ $postgres.ssl.enabled | quote }}
 {{- end }}
diff --git a/src/DAL/connectionOptions.ts b/src/DAL/connectionOptions.ts
index 4ad0167..9c637e2 100644
--- a/src/DAL/connectionOptions.ts
+++ b/src/DAL/connectionOptions.ts
@@ -19,7 +19,7 @@ export const createConnectionOptions = (dbConfig: DbConfig): DataSourceOptions =
       ssl: {
         key: readFileSync(sslPaths.key),
         cert: readFileSync(sslPaths.cert),
-        ca: readFileSync(sslPaths.ca),
+        ...(sslPaths.ca !== undefined && sslPaths.ca !== '' ? { ca: readFileSync(sslPaths.ca) } : {}),
         rejectUnauthorized,
       },
     };
diff --git a/src/common/interfaces.ts b/src/common/interfaces.ts
index 9b4bb15..ad5a163 100644
--- a/src/common/interfaces.ts
+++ b/src/common/interfaces.ts
@@ -20,7 +20,7 @@ export interface DbConfig extends PostgresConnectionOptions {
   database: string;
   enableSslAuth?: boolean;
   sslPaths?: {
-    ca: string;
+    ca?: string;
     cert: string;
     key: string;
   };