update

README.md

@@ -223,8 +223,10 @@ PostGen/
 
 1. **Get Your Connection String**:
    - From your CockroachDB dashboard, copy the connection string
-   - Format: `postgresql://username:password@host:port/database?sslmode=verify-full`
-   - Example: `postgresql://seth:YOUR_PASSWORD@ezofis-11210.jxf.gcp-us-east1.cockroachlabs.cloud:26257/defaultdb?sslmode=verify-full`
+   - Format: `postgresql://username:password@host:port/database?sslmode=require`
+   - Example: `postgresql://seth:YOUR_PASSWORD@ezofis-11210.jxf.gcp-us-east1.cockroachlabs.cloud:26257/defaultdb?sslmode=require`
+   - **Note**: The app automatically uses `sslmode=require` (secure SSL without certificate file requirement)
+   - If you use `sslmode=verify-full`, the app will automatically fall back to `require` if the certificate file is not available
 
 2. **Add to HuggingFace Spaces**:
    - Go to your Space settings → "Variables and secrets"

backend/app/database.py

@@ -14,9 +14,20 @@ DATABASE_URL = os.getenv(
 if DATABASE_URL.startswith("postgresql://") or DATABASE_URL.startswith("postgres://"):
     # CockroachDB connection - use NullPool to avoid connection issues
     # CockroachDB requires SSL, so we ensure sslmode is set
+    # Use 'require' mode which uses SSL but doesn't require certificate file
+    # For production with certificate, use 'verify-full' and provide sslrootcert
+    import os
+    cert_path = os.path.expanduser("~/.postgresql/root.crt")
+    
     if "sslmode" not in DATABASE_URL:
         separator = "&" if "?" in DATABASE_URL else "?"
-        DATABASE_URL = f"{DATABASE_URL}{separator}sslmode=verify-full"
+        # Use 'require' instead of 'verify-full' to work without certificate file
+        # Still secure (uses SSL) but doesn't verify the certificate
+        DATABASE_URL = f"{DATABASE_URL}{separator}sslmode=require"
+    elif "sslmode=verify-full" in DATABASE_URL and not os.path.exists(cert_path):
+        # If verify-full is set but cert file doesn't exist, change to require
+        DATABASE_URL = DATABASE_URL.replace("sslmode=verify-full", "sslmode=require")
+        print("⚠ Certificate file not found, using sslmode=require instead of verify-full")
     
     engine = create_engine(
         DATABASE_URL,