From 1678fb6b94edbca58e85d9f74b97008920877f45 Mon Sep 17 00:00:00 2001
From: Mark Sinclair <mmsinclair@users.noreply.github.com>
Date: Thu, 19 Feb 2026 17:08:06 +0000
Subject: [PATCH] Data Observatory: add env var PG_CERT and bump version

---
 Cargo.lock                         |  2 +-
 nym-data-observatory/Cargo.toml    |  2 +-
 nym-data-observatory/src/db/mod.rs | 11 ++++++++++-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 61b7daa89f..7c41e6d86c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -6209,7 +6209,7 @@ dependencies = [
 
 [[package]]
 name = "nym-data-observatory"
-version = "1.0.1"
+version = "1.0.2"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/nym-data-observatory/Cargo.toml b/nym-data-observatory/Cargo.toml
index 4a6a09685b..39fa28f33f 100644
--- a/nym-data-observatory/Cargo.toml
+++ b/nym-data-observatory/Cargo.toml
@@ -3,7 +3,7 @@
 
 [package]
 name = "nym-data-observatory"
-version = "1.0.1"
+version = "1.0.2"
 authors.workspace = true
 repository.workspace = true
 homepage.workspace = true
diff --git a/nym-data-observatory/src/db/mod.rs b/nym-data-observatory/src/db/mod.rs
index a8b7a7a952..8204aa3037 100644
--- a/nym-data-observatory/src/db/mod.rs
+++ b/nym-data-observatory/src/db/mod.rs
@@ -1,5 +1,6 @@
 use anyhow::{Result, anyhow};
 use sqlx::{Postgres, migrate::Migrator, postgres::PgConnectOptions};
+use std::env;
 use std::str::FromStr;
 use tracing::info;
 
@@ -19,7 +20,15 @@ pub(crate) struct Storage {
 
 impl Storage {
     pub async fn init(connection_url: String) -> Result<Self> {
-        let connect_options = PgConnectOptions::from_str(&connection_url)?;
+        let mut connect_options = PgConnectOptions::from_str(&connection_url)?;
+
+        let ssl_cert_path = env::var("PG_CERT").ok();
+
+        if let Some(ssl_cert) = ssl_cert_path {
+            connect_options = connect_options
+                .ssl_mode(sqlx::postgres::PgSslMode::Require)
+                .ssl_root_cert(ssl_cert);
+        }
 
         let pool = DbPool::connect_with(connect_options)
             .await