It seems that fly volumes default to encrypted, but the pg ones are unencrypted and this cannot be changed. I don’t need them to be encrypted, but wonder why this is the case.

We probably shouldn’t default to encrypted. We don’t currently support snapshot restores from encrypted volumes. Postgres users restore frequently, so defaulting to “restorable” is good!

We had to restore a snapshot but sad to see that its still not supported to restore from an encrypted snapshot.

Is this still the case? If I’m booting my own postgres image should I be using an unencrypted volume?

See answer here: [image] Seeking advice about securing postgres on Fly Questions / Help No, that’s no longer true. Restores work fine on encrypted volumes now.

Fly.io

Postgres volumes not encrypted?

Questions / Help

paulrudy October 13, 2022, 8:12pm 5

See answer here: