From 5e74d7927bdbcf5a98f66b6731a0d3ee54696bc4 Mon Sep 17 00:00:00 2001
From: b3go <52070186+b3go@users.noreply.github.com>
Date: Mon, 20 Jul 2026 16:53:08 +0200
Subject: [PATCH] fix(chart): use DB_POSTGRESDB_SSL_ENABLED to enable Postgres
 TLS

n8n reads DB_POSTGRESDB_SSL_ENABLED, not DB_POSTGRESDB_SSL, so
database.ssl.enabled had no effect on its own and the connection
quietly stayed plaintext.

This likely went unnoticed because n8n also switches SSL on whenever
DB_POSTGRESDB_SSL_CA or _CERT is set, and the chart emits those
correctly.
---
 charts/n8n/templates/_configmap-env.tpl | 4 ++--
 charts/n8n/templates/configmap.yaml     | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/charts/n8n/templates/_configmap-env.tpl b/charts/n8n/templates/_configmap-env.tpl
index 85f2580a..abac45af 100644
--- a/charts/n8n/templates/_configmap-env.tpl
+++ b/charts/n8n/templates/_configmap-env.tpl
@@ -42,11 +42,11 @@ Environment variables from ConfigMap for all components
       key: DB_POSTGRESDB_SCHEMA
 {{- end }}
 {{- if .Values.database.ssl.enabled }}
-- name: DB_POSTGRESDB_SSL
+- name: DB_POSTGRESDB_SSL_ENABLED
   valueFrom:
     configMapKeyRef:
       name: {{ include "n8n.fullname" . }}
-      key: DB_POSTGRESDB_SSL
+      key: DB_POSTGRESDB_SSL_ENABLED
 {{- if .Values.database.ssl.ca }}
 - name: DB_POSTGRESDB_SSL_CA
   valueFrom:
diff --git a/charts/n8n/templates/configmap.yaml b/charts/n8n/templates/configmap.yaml
index be84f66a..26136b39 100644
--- a/charts/n8n/templates/configmap.yaml
+++ b/charts/n8n/templates/configmap.yaml
@@ -24,7 +24,7 @@ data:
   DB_POSTGRESDB_SCHEMA: {{ .Values.database.schema | quote }}
   {{- end }}
   {{- if .Values.database.ssl.enabled }}
-  DB_POSTGRESDB_SSL: "true"
+  DB_POSTGRESDB_SSL_ENABLED: "true"
   {{- if .Values.database.ssl.ca }}
   DB_POSTGRESDB_SSL_CA: {{ .Values.database.ssl.ca | quote }}
   {{- end }}