WikiJS + Azure Postgres Flexible Server -> "no pg_hba.conf entry for host"

[steg87]

I am trying to set up WikiJS using our existing Azure Database for PostgreSQL flexible server. I followed the instructions for Docker installation at https://docs.requarks.io/install/docker. I have my launch command:

docker run --rm -p 8080:3000 --name wikijs -e "DB_TYPE=postgres" -e "DB_HOST=pg01.my-domain.com" -e "DB_PORT=5432" -e "DB_USER=wikijs" -e "DB_PASS=mypassword" -e "DB_NAME=wikijs" requarks/wiki:2

I get the following response.

Loading configuration from /wiki/config.yml... OK
2023-07-12T17:50:21.975Z [MASTER] info: =======================================
2023-07-12T17:50:21.977Z [MASTER] info: = Wiki.js 2.5.299 =====================
2023-07-12T17:50:21.977Z [MASTER] info: =======================================
2023-07-12T17:50:21.978Z [MASTER] info: Initializing...
2023-07-12T17:50:22.549Z [MASTER] info: Using database driver pg for postgres [ OK ]
2023-07-12T17:50:22.560Z [MASTER] info: Connecting to database...
2023-07-12T17:50:22.683Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:22.684Z [MASTER] warn: Will retry in 3 seconds... [Attempt 1 of 10]
2023-07-12T17:50:25.685Z [MASTER] info: Connecting to database...
2023-07-12T17:50:25.754Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:25.754Z [MASTER] warn: Will retry in 3 seconds... [Attempt 2 of 10]
2023-07-12T17:50:28.757Z [MASTER] info: Connecting to database...
2023-07-12T17:50:28.932Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:28.932Z [MASTER] warn: Will retry in 3 seconds... [Attempt 3 of 10]
2023-07-12T17:50:31.933Z [MASTER] info: Connecting to database...
2023-07-12T17:50:32.048Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:32.049Z [MASTER] warn: Will retry in 3 seconds... [Attempt 4 of 10]
2023-07-12T17:50:35.052Z [MASTER] info: Connecting to database...
2023-07-12T17:50:35.200Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:35.200Z [MASTER] warn: Will retry in 3 seconds... [Attempt 5 of 10]
2023-07-12T17:50:38.203Z [MASTER] info: Connecting to database...
2023-07-12T17:50:38.316Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:38.316Z [MASTER] warn: Will retry in 3 seconds... [Attempt 6 of 10]
2023-07-12T17:50:41.320Z [MASTER] info: Connecting to database...
2023-07-12T17:50:41.421Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:41.421Z [MASTER] warn: Will retry in 3 seconds... [Attempt 7 of 10]
2023-07-12T17:50:44.424Z [MASTER] info: Connecting to database...
2023-07-12T17:50:44.552Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:44.552Z [MASTER] warn: Will retry in 3 seconds... [Attempt 8 of 10]
2023-07-12T17:50:47.555Z [MASTER] info: Connecting to database...
2023-07-12T17:50:47.670Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:47.670Z [MASTER] warn: Will retry in 3 seconds... [Attempt 9 of 10]
2023-07-12T17:50:50.674Z [MASTER] info: Connecting to database...
2023-07-12T17:50:50.770Z [MASTER] error: Database Connection Error: 28000 undefined:undefined
2023-07-12T17:50:50.770Z [MASTER] warn: Will retry in 3 seconds... [Attempt 10 of 10]
2023-07-12T17:50:53.773Z [MASTER] info: Connecting to database...
2023-07-12T17:50:53.934Z [MASTER] error: Database Initialization Error: no pg_hba.conf entry for host "172.16.69.3", user "wikijs", database "wikijs", no encryption

The repeating Database Connection Error: 28000 error suggests the username and password is incorrect, but I can use the psql tool to login from the same machine fine.

I saw some solutions relating to no pg_hba.conf entry for host error suggesting to modify pg_hba.conf file and change ident to md5. For Azure flexible servers it is not possible to modify pg_hba.conf file directly as it is a managed service, but using "Server parameters" in the Azure portal I can see that azure.accepted_password_auth_method allows MD5.

Can anyone suggest what I am missing?

I can get it to work when I use the docker compose example from the https://docs.requarks.io/install/docker page, but I want to set this up with our production database backend.

[steg87]

I figured it out. I noticed when logging in via psql that I got the following header:

psql (14.8 (Ubuntu 14.8-0ubuntu0.22.04.1), server 14.7)
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits: 256, compression: off)
Type "help" for help.

It shows that it was using TLS, so therefore I assume Azure Postgres Flexible Server enforces TLS. All I had to do was include the env variable DB_SSL=true and it started working.

There was also a slight issue where I got the following error:

Database Connection Error: ERR_TLS_CERT_ALTNAME_INVALID undefined:undefined

But this was probably specific to my setup - I had been using a local hostname to access the database host and it didn't match the server name of the Azure database certificate. I just updated my hosts file and then it worked.

[diegoesilva]

Thank you very much, @steg87, it was exactly what I needed.