Seeking advice about securing postgres on Fly

Questions / Help
6

Ok, here’s what I did to encrypt my existing unencrypted postgres volume(s):

  1. Create a replica outside of my postgres primary region with fly postgres create and fly scale count. If I actually want to finish with a replica in that region, then make it an encrypted replica.
  2. Use these steps to change the primary region to the new region.
  3. Wait until fly status shows the new region as leader, and the original region as replica.
  4. Delete the volume in the original region.
  5. Create an encrypted replica in the original region.
  6. Go through the instructions linked in step 2 again, this time to change the primary region to the original region.
  7. Wait until fly status shows the original region as leader, and the new region as replica.
  8. Delete unencrypted replicas and create encrypted replicas as needed.
1 Like