ToolJet/docs/versioned_docs/version-3.16.0-LTS/setup/postgresql-13-16/azure/best-practices.md
2025-11-24 10:32:41 +05:30

2.4 KiB

id title
best-practices Best Practices and Additional Resources

Post-Upgrade Checklist

  • Database upgrade completed successfully to PostgreSQL 16
  • PGSSLMODE=require environment variable configured
  • SSL connections verified and working
  • Application starts without SSL errors
  • Database operations working correctly
  • SSL connection verified in logs
  • Performance testing completed
  • Backup verification completed
  • Monitoring and alerting updated
  • Documentation updated with new configuration
  • Team trained on new setup

Security Best Practices

  1. Always require SSL connections: Set PGSSLMODE=require for all Azure PostgreSQL connections
  2. Use Azure Key Vault: Store database passwords and sensitive configuration in Azure Key Vault
  3. Enable Azure PostgreSQL audit logs: Monitor database access and changes
  4. Network security: Use private endpoints when possible for Azure PostgreSQL
  5. Regular security audits: Monitor connection logs for SSL issues
  6. Backup encryption: Ensure backups are encrypted (enabled by default in Azure)
  7. Use Azure AD authentication: When supported, use Azure AD instead of passwords
  8. Implement proper RBAC: Use Azure RBAC for resource management permissions

Additional Resources

:::note Important Note: The PGSSLMODE=require environment variable is mandatory for connecting to Azure Database for PostgreSQL Flexible Server. This ensures secure SSL/TLS encrypted connections are established and is a requirement for all Azure PostgreSQL databases. :::