Anyone using SSL for Redis?

[sneko]

Hi, I have a Redis instance with SSL but I'm not able to make it working, logs being flooded with:

Error: self-signed certificate in certificate chain
    at TLSSocket.onConnectSecure (node:_tls_wrap:1677:34)
    at TLSSocket.emit (node:events:518:28)
    at TLSSocket._finishInit (node:_tls_wrap:1076:8)
    at ssl.onhandshakedone (node:_tls_wrap:862:12) {
  code: 'SELF_SIGNED_CERT_IN_CHAIN'

I'm properly using the URL:

rediss://xxx:yyyy@zzzz:6380/0

But I'm wondering if:

postiz-app/libraries/nestjs-libraries/src/redis/redis.service.ts

Lines 25 to 30 in ad7f7d9

	export const ioRedis = process.env.REDIS_URL
	? new Redis(process.env.REDIS_URL, {
	maxRetriesPerRequest: null,
	connectTimeout: 10000,
	})
	: (new MockRedis() as unknown as Redis); // Type cast to Redis to maintain interface compatibility

Should allow something like passing TLS settings, like:

  tls: {
    ca: fs.readFileSync('/etc/ssl/certs/my-own-ca.crt')
  }

or as a fallback:

tls: {
  rejectUnauthorized: false
}

Curious to know if someone has succeeded without this?

Thank you,