From fd3e1ba1507118215e81b936f55fc26e49f5449b Mon Sep 17 00:00:00 2001
From: Randall Stillwell <me@randallstillwell.com>
Date: Thu, 16 Apr 2026 00:05:00 -0500
Subject: [PATCH] Fix TLS certificate error for Supabase pooler connection

Supabase's PgBouncer pooler uses a certificate not in Node's default
CA store, causing "self-signed certificate in certificate chain" errors
on Vercel. Configure pg.Pool with ssl.rejectUnauthorized: false.

Made-with: Cursor
---
 src/lib/db.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/lib/db.ts b/src/lib/db.ts
index 7da7dfc..9614244 100644
--- a/src/lib/db.ts
+++ b/src/lib/db.ts
@@ -10,6 +10,7 @@ function createPrismaClient() {
   const pool = new pg.Pool({
     connectionString: process.env.DATABASE_URL,
     max: 5,
+    ssl: { rejectUnauthorized: false },
   });
   const adapter = new PrismaPg(pool);
   return new PrismaClient({ adapter });