From b214cbc003eaf1114f3952e5fb33916f894ab998 Mon Sep 17 00:00:00 2001
From: Benjamin Admin <benjaminadmin@MacBook-Pro.local>
Date: Mon, 11 May 2026 20:49:44 +0200
Subject: [PATCH] fix(mc-api): accept self-signed SSL cert for production DB

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 admin-compliance/app/api/sdk/v1/master-controls/route.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/admin-compliance/app/api/sdk/v1/master-controls/route.ts b/admin-compliance/app/api/sdk/v1/master-controls/route.ts
index e80f5a8..7dc329b 100644
--- a/admin-compliance/app/api/sdk/v1/master-controls/route.ts
+++ b/admin-compliance/app/api/sdk/v1/master-controls/route.ts
@@ -5,6 +5,9 @@ const pool = new Pool({
   connectionString: process.env.COMPLIANCE_DATABASE_URL ||
     process.env.DATABASE_URL ||
     'postgresql://breakpilot:breakpilot123@bp-core-postgres:5432/breakpilot_db',
+  ssl: process.env.COMPLIANCE_DATABASE_URL?.includes('sslmode=require')
+    ? { rejectUnauthorized: false }
+    : false,
 })
 
 /**