test: use directory outside of /var/lib/postgresql

database/testdata/owncerts.sh

@@ -1,10 +1,12 @@
 #!/bin/bash
 set -e
 
-chmod 600 /var/lib/postgresql/*.key
-chmod 644 /var/lib/postgresql/*.crt
+chown -R postgres:postgres /opt/moov/
 
-chown root:root /var/lib/postgresql/*.key
-chown root:root /var/lib/postgresql/*.crt
+chmod 600 /opt/moov/certs/*.key
+chmod 644 /opt/moov/certs/*.crt
+
+chown postgres:postgres /opt/moov/certs/*.key
+chown postgres:postgres /opt/moov/certs/*.crt
 
 ls -l /var/lib/postgresql/

docker-compose.yml

@@ -33,7 +33,7 @@ services:
     restart: always
     ports:
       - "5432:5432"
-    command: -c ssl=on -c ssl_cert_file=/var/lib/postgresql/server.crt -c ssl_key_file=/var/lib/postgresql/server.key -c ssl_ca_file=/var/lib/postgresql/root.crt
+    command: -c ssl=on -c ssl_cert_file=/opt/moov/certs/server.crt -c ssl_key_file=/opt/moov/certs/server.key -c ssl_ca_file=/opt/moov/certs/root.crt
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U moov"]
       interval: 5s
@@ -46,9 +46,9 @@ services:
     networks:
       - intranet
     volumes:
-      - ./testcerts/root.crt:/var/lib/postgresql/root.crt
-      - ./testcerts/server.crt:/var/lib/postgresql/server.crt
-      - ./testcerts/server.key:/var/lib/postgresql/server.key
+      - ./testcerts/root.crt:/opt/moov/certs/root.crt
+      - ./testcerts/server.crt:/opt/moov/certs/server.crt
+      - ./testcerts/server.key:/opt/moov/certs/server.key
       - ./database/testdata/owncerts.sh:/docker-entrypoint-initdb.d/owncerts.sh
 
 networks: