From 9c0d7b88af55db44d6e92be9b67357ed53554e1f Mon Sep 17 00:00:00 2001
From: qiaozongming <qiaozongming@xiaomi.com>
Date: Thu, 18 Jun 2026 18:23:09 +0800
Subject: [PATCH] fix(security): enforce TLS verification for console db
 outside development

---
 packages/console/core/drizzle.config.ts | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/packages/console/core/drizzle.config.ts b/packages/console/core/drizzle.config.ts
index 0b7c4417e..bea8cdd85 100644
--- a/packages/console/core/drizzle.config.ts
+++ b/packages/console/core/drizzle.config.ts
@@ -13,8 +13,6 @@ export default defineConfig({
     user: Resource.Database.username,
     password: Resource.Database.password,
     port: Resource.Database.port,
-    ssl: {
-      rejectUnauthorized: false,
-    },
+    ssl: process.env.NODE_ENV === "development" ? { rejectUnauthorized: false } : { rejectUnauthorized: true },
   },
 })