> ## Documentation Index
> Fetch the complete documentation index at: https://docs.apowerb.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Database

> Postgres, TLS and migrations.

## TLS

The Postgres shipped with the compose stack does not use TLS and does not need to:
traffic never leaves the internal Docker network, hence `DB_SSLMODE=disable`.

Against a managed database — Neon, RDS, OVHcloud — point `DB_HOST` at it and restore
`DB_SSLMODE=require`, which is the core's default.

## Migrations

Migrations run automatically at boot: the `ensure_*` helpers converge the schema before
the application serves traffic. There is no separate migration command.

<Warning>
  Because migrations run forward at boot, rolling the application back to a previous
  release does **not** roll the schema back. Take a database dump before upgrading a
  production instance, and treat the dump — not the previous image — as your rollback
  plan.
</Warning>


## Related topics

- [List database tool configurations](/api-reference/bi-datasets/list-database-tool-configurations.md)
- [Tools](/concepts/tools.md)
- [Architecture](/concepts/architecture.md)
- [Configuration](/configuration.md)
- [RAG](/guides/rag.md)