Add TLS-enabled PostgreSQL and ThingsBoard integration, update README #1367

sigurd-rbj · 2025-11-19T16:05:12Z

Pull Request Template

Title

[Provide a succinct and descriptive title for the pull request,
e.g., "Improve dockerfiles for admins"]

Type of Change

Description

Configures PostgreSQL to use TLS certificates from certs/${HOSTNAME}.
Ensures ThingsBoard connects to PostgreSQL using sslmode=require.
Adds installation steps for ThingsBoard to the services README.
Updates compose.services.secure.yml to mount certs and enable TLS for all services.
Updates services.env.template with required fields.
Verified on WSL with a clean install.

Checklist

My code adheres to the coding and style guidelines of the project.
I have added tests for all the new code and any changes made to
existing code.
I have made corresponding changes to the documentation.

…, and update services.env.template

prasadtalasila

@sigurd-rbj Thanks for the PR. I couldn't bring up the thingsboard service successfully. Please see the review comments.

prasadtalasila · 2025-11-19T17:38:49Z

deploy/services/README.md

  ```bash
  cat certs/services.foo.com/privkey.pem \
-    certs/services.foo.com/fullchain.pem > certs/foo.com/combined.pem
+    certs/services.foo.com/fullchain.pem > certs/servicesfoo.com/combined.pem


This should be certs/services.foo.com after redirection

prasadtalasila · 2025-11-23T14:47:37Z

deploy/services/README.md

  cp config/services.env.template config/services.env
  ```

+* Start PostgreSQL and run ThingsBoard install.


The data and log directories of thingsboard need specific permissions

sudo chown -R 799:799 data/thingsboard sudo chown -R 799:799 log/thingsboard

Please see this page

prasadtalasila · 2025-11-23T14:48:44Z

deploy/services/README.md

+* Start PostgreSQL and run ThingsBoard install.
+
+  ```bash
+  docker compose -f compose.services.secure.yml\


there should be a space character before the backward slash

prasadtalasila · 2025-11-23T14:50:11Z

deploy/services/README.md

+  docker compose -f compose.services.secure.yml\
+    --env-file config/services.env\
+    up -d postgres
+  docker compose -f compose.services.secure.yml \


gives the following output

Starting ThingsBoard installation ... OpenJDK 64-Bit Server VM warning: Option UseBiasedLocking was deprecated in version 15.0 and will likely be removed in a future release. _____ _ _ ____ _ |_ _| |__ (_)_ __ __ _ ___| __ ) ___ __ _ _ __ __| | | | | '_ \| | '_ \ / _` / __| _ \ / _ \ / _` | '__/ _` | | | | | | | | | | | (_| \__ \ |_) | (_) | (_| | | | (_| | |_| |_| |_|_|_| |_|\__, |___/____/ \___/ \__,_|_| \__,_| |___/ =========================================================== :: ThingsBoard :: (v4.2.1) =========================================================== Unable to start web server

prasadtalasila · 2025-11-23T14:52:03Z

deploy/services/README.md

+  docker compose -f compose.services.secure.yml \
+    --env-file config/services.env \
+    run --rm -e INSTALL_TB=true thingsboard-ce
+  ```


thingsboard has installation step followed by service start step. Please see docs. The service start step must be specified as well.

If the service start command is run, it throws the following error.

docker compose -f compose.services.secure.yml --env-file config/services.env up thingsboard-ce [+] Running 2/2 ✔ Container postgres Running 0.0s ✔ Container thingsboard Created 0.1s Attaching to thingsboard thingsboard | Starting 'ThingsBoard Node Microservice' ... thingsboard | OpenJDK 64-Bit Server VM warning: Option UseBiasedLocking was deprecated in version 15.0 and will likely be removed in a future release. thingsboard | _____ _ _ ____ _ thingsboard | |_ _| |__ (_)_ __ __ _ ___| __ ) ___ __ _ _ __ __| | thingsboard | | | | '_ \| | '_ \ / _` / __| _ \ / _ \ / _` | '__/ _` | thingsboard | | | | | | | | | | | (_| \__ \ |_) | (_) | (_| | | | (_| | thingsboard | |_| |_| |_|_|_| |_|\__, |___/____/ \___/ \__,_|_| \__,_| thingsboard | |___/ thingsboard | thingsboard | =========================================================== thingsboard | :: ThingsBoard :: (v4.2.1) thingsboard | =========================================================== thingsboard | thingsboard | 2025-11-23 14:53:08,148 [background-preinit] INFO o.h.validator.internal.util.Version - HV000001: Hibernate Validator 8.0.3.Final thingsboard | 2025-11-23 14:53:08,342 [main] INFO o.t.s.ThingsboardServerApplication - Starting ThingsboardServerApplication v4.2.1 using Java 17.0.16 with PID 1 (/usr/share/thingsboard/bin/thingsboard.jar started by thingsboard in /usr/share/thingsboard/bin) thingsboard | 2025-11-23 14:53:08,344 [main] INFO o.t.s.ThingsboardServerApplication - No active profile set, falling back to 1 default profile: "default" thingsboard | 2025-11-23 14:53:09,195 [main] WARN o.s.c.a.AnnotationTypeMapping - Support for convention-based annotation attribute overrides is deprecated and will be removed in Spring Framework 7.0. Please annotate the following attributes in @org.thingsboard.server.config.annotations.ApiOperation with appropriate @AliasFor declarations: [hidden, requestBody, responses] thingsboard | 2025-11-23 14:53:14,466 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Multiple Spring Data modules found, entering strict repository configuration mode thingsboard | 2025-11-23 14:53:14,466 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Bootstrapping Spring Data JPA repositories in LAZY mode. thingsboard | 2025-11-23 14:53:14,761 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Finished Spring Data repository scanning in 273 ms. Found 7 JPA repository interfaces. thingsboard | 2025-11-23 14:53:14,765 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Multiple Spring Data modules found, entering strict repository configuration mode thingsboard | 2025-11-23 14:53:14,765 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Bootstrapping Spring Data JPA repositories in LAZY mode. thingsboard | 2025-11-23 14:53:15,185 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Finished Spring Data repository scanning in 417 ms. Found 57 JPA repository interfaces. thingsboard | 2025-11-23 14:53:15,192 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Multiple Spring Data modules found, entering strict repository configuration mode thingsboard | 2025-11-23 14:53:15,192 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Bootstrapping Spring Data JPA repositories in LAZY mode. thingsboard | 2025-11-23 14:53:15,213 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Finished Spring Data repository scanning in 17 ms. Found 1 JPA repository interface. thingsboard | 2025-11-23 14:53:15,214 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Multiple Spring Data modules found, entering strict repository configuration mode thingsboard | 2025-11-23 14:53:15,214 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Bootstrapping Spring Data JPA repositories in LAZY mode. thingsboard | 2025-11-23 14:53:15,238 [main] INFO o.s.d.r.c.RepositoryConfigurationDelegate - Finished Spring Data repository scanning in 18 ms. Found 1 JPA repository interface. thingsboard | 2025-11-23 14:53:16,824 [main] INFO o.s.i.c.DefaultConfiguringBeanFactoryPostProcessor - No bean named 'errorChannel' has been explicitly defined. Therefore, a default PublishSubscribeChannel will be created. thingsboard | 2025-11-23 14:53:16,847 [main] INFO o.s.i.c.DefaultConfiguringBeanFactoryPostProcessor - No bean named 'integrationHeaderChannelRegistry' has been explicitly defined. Therefore, a default DefaultHeaderChannelRegistry will be created. thingsboard | 2025-11-23 14:53:18,281 [main] INFO o.t.s.q.d.DefaultTbServiceInfoProvider - Current Service ID: tb-ce-node thingsboard | 2025-11-23 14:53:20,022 [main] INFO o.h.jpa.internal.util.LogHelper - HHH000204: Processing PersistenceUnitInfo [name: default] thingsboard | 2025-11-23 14:53:20,247 [main] INFO org.hibernate.Version - HHH000412: Hibernate ORM core version 6.6.29.Final thingsboard | 2025-11-23 14:53:20,364 [main] INFO o.h.c.i.RegionFactoryInitiator - HHH000026: Second-level cache disabled thingsboard | 2025-11-23 14:53:20,693 [main] INFO com.zaxxer.hikari.HikariDataSource - HikariPool-1 - Starting... thingsboard | 2025-11-23 14:53:22,164 [main] WARN o.h.e.jdbc.spi.SqlExceptionHelper - SQL Error: 0, SQLState: 28P01 thingsboard | 2025-11-23 14:53:22,165 [main] ERROR o.h.e.jdbc.spi.SqlExceptionHelper - FATAL: password authentication failed for user "postgres" thingsboard | 2025-11-23 14:53:22,168 [main] WARN o.h.e.j.e.i.JdbcEnvironmentInitiator - HHH000342: Could not obtain connection to query metadata thingsboard | org.hibernate.exception.GenericJDBCException: unable to obtain isolated JDBC connection [FATAL: password authentication failed for user "postgres"] [n/a] thingsboard | at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:63) thingsboard | at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:108) thingsboard | at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:94) thingsboard | at org.hibernate.resource.transaction.backend.jdbc.internal.JdbcIsolationDelegate.delegateWork(JdbcIsolationDelegate.java:116) thingsboard | at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.getJdbcEnvironmentUsingJdbcMetadata(JdbcEnvironmentInitiator.java:334) thingsboard | at org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator.initiateService(JdbcEnvironmentInitiator.java:129) ...

prasadtalasila · 2025-11-23T14:56:45Z

deploy/services/compose.services.secure.yml

+      - platform-services
+
+  thingsboard-ce:
+    image: 'thingsboard/tb-node:4.2.1'


please check the advantage of this image versus tb-postgres. If you can make both work, we can have a live comparison of both the setups.

prasadtalasila · 2025-11-23T15:04:58Z

@sigurd-rbj
This installation tutorial works well. Perhaps you can adopt this into our compose.services.yml file.

…tend services README

sonarqubecloud · 2025-12-01T09:50:51Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Add TLS-enabled PostgreSQL and ThingsBoard integration, update README…

685d8f2

…, and update services.env.template

prasadtalasila mentioned this pull request Nov 19, 2025

Add ThingsBoard HTTP #1365

Closed

8 tasks

prasadtalasila added this to the Release v0.8 milestone Nov 19, 2025

prasadtalasila added this to Digital Twin as a Service Nov 19, 2025

github-project-automation bot moved this to In progress in Digital Twin as a Service Nov 19, 2025

Add ThingsBoard tenant and user setup instructions

c059009

prasadtalasila reviewed Nov 23, 2025

View reviewed changes

sigurd-rbj added 4 commits November 24, 2025 12:36

Add automated ThingsBoard setup, update services.env.template, and ex…

def62af

…tend services README

Add SQL init script, update README, compose, env template, user script

7f651b5

Update ThingsBoard script

026f84a

Update README installation steps and commands

694b96d

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add TLS-enabled PostgreSQL and ThingsBoard integration, update README #1367

Add TLS-enabled PostgreSQL and ThingsBoard integration, update README #1367

Uh oh!

sigurd-rbj commented Nov 19, 2025 •

edited

Loading

Uh oh!

prasadtalasila left a comment

Uh oh!

prasadtalasila Nov 19, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila Nov 23, 2025

Uh oh!

prasadtalasila commented Nov 23, 2025

Uh oh!

sonarqubecloud bot commented Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Add TLS-enabled PostgreSQL and ThingsBoard integration, update README #1367

Are you sure you want to change the base?

Add TLS-enabled PostgreSQL and ThingsBoard integration, update README #1367

Uh oh!

Conversation

sigurd-rbj commented Nov 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Pull Request Template

Title

Type of Change

Description

Checklist

Uh oh!

prasadtalasila left a comment

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 19, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila Nov 23, 2025

Choose a reason for hiding this comment

Uh oh!

prasadtalasila commented Nov 23, 2025

Uh oh!

sonarqubecloud bot commented Dec 1, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

sigurd-rbj commented Nov 19, 2025 •

edited

Loading