chore: Configure for connecting to Neon's Postgres

config/runtime.exs

@@ -30,13 +30,22 @@ if config_env() == :prod do
   # For example: ecto://USER:PASS@HOST/DATABASE
   # """
 
-  maybe_ipv6 = if System.get_env("ECTO_IPV6") in ~w(true 1), do: [:inet6], else: []
+  # maybe_ipv6 = if System.get_env("ECTO_IPV6") in ~w(true 1), do: [:inet6], else: []
 
+  # Previously, this has `socket_options: maybe_ipv6`, but removing that appeared to help connect to the DB.
   config :medical_transcription, MedicalTranscription.Repo,
-    # ssl: true,
+    ssl: true,
     url: database_url,
     pool_size: String.to_integer(System.get_env("POOL_SIZE") || "10"),
-    socket_options: maybe_ipv6
+    socket_options: [],
+    ssl_opts: [
+      cacertfile: "/etc/ssl/certs/ca-certificates.crt",
+      verify: :verify_peer,
+      server_name_indication: to_charlist(System.get_env("DATABASE_HOST")),
+      customize_hostname_check: [
+        match_fun: :public_key.pkix_verify_hostname_match_fun(:https)
+      ]
+    ]
 
   # The secret key base is used to sign/encrypt cookies and other secrets.
   # A default value is used in config/dev.exs and config/test.exs but you

lib/medical_transcription/application.ex

@@ -17,8 +17,7 @@ defmodule MedicalTranscription.Application do
 
     children = [
       MedicalTranscriptionWeb.Telemetry,
-      # TODO: Re-enable this when we have a database set up for the Fly app.
-      # MedicalTranscription.Repo,
+      MedicalTranscription.Repo,
       # TODO: We may need to manually disable this when testing locally in Docker
       {DNSCluster,
        query: Application.get_env(:medical_transcription, :dns_cluster_query) || :ignore},