851e585b9b
Add ISC license headers to all .go, .ts, .tsx, and .sql files using each file's git history to determine the correct copyright year or year range. Trademarked icons (brand logos, vendor logos, compliance framework logos) are excluded. Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
62 lines
2.4 KiB
SQL
62 lines
2.4 KiB
SQL
-- Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
|
|
--
|
|
-- Permission to use, copy, modify, and/or distribute this software for any
|
|
-- purpose with or without fee is hereby granted, provided that the above
|
|
-- copyright notice and this permission notice appear in all copies.
|
|
--
|
|
-- THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
-- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
-- AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
-- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
-- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
-- OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
-- PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
CREATE EXTENSION IF NOT EXISTS citext;
|
|
|
|
CREATE TYPE custom_domain_ssl_status AS ENUM (
|
|
'PENDING',
|
|
'PROVISIONING',
|
|
'ACTIVE',
|
|
'RENEWING',
|
|
'EXPIRED',
|
|
'FAILED'
|
|
);
|
|
|
|
CREATE TABLE custom_domains (
|
|
id TEXT PRIMARY KEY,
|
|
tenant_id TEXT NOT NULL,
|
|
organization_id TEXT NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
|
|
domain CITEXT NOT NULL UNIQUE,
|
|
ssl_certificate BYTEA,
|
|
encrypted_ssl_private_key BYTEA,
|
|
ssl_certificate_chain TEXT,
|
|
ssl_status custom_domain_ssl_status,
|
|
ssl_expires_at TIMESTAMP WITH TIME ZONE,
|
|
http_challenge_token TEXT,
|
|
http_challenge_key_auth TEXT,
|
|
http_challenge_url TEXT,
|
|
http_order_url TEXT,
|
|
is_active BOOLEAN NOT NULL,
|
|
created_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
updated_at TIMESTAMP WITH TIME ZONE NOT NULL
|
|
);
|
|
|
|
CREATE UNLOGGED TABLE cached_certificates (
|
|
domain CITEXT PRIMARY KEY,
|
|
certificate_pem TEXT NOT NULL,
|
|
private_key_pem TEXT NOT NULL,
|
|
certificate_chain TEXT,
|
|
expires_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
cached_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
custom_domain_id TEXT REFERENCES custom_domains(id) ON DELETE CASCADE
|
|
);
|
|
|
|
CREATE INDEX idx_custom_domains_domain ON custom_domains(domain) WHERE is_active = true;
|
|
CREATE INDEX idx_custom_domains_org ON custom_domains(organization_id);
|
|
CREATE INDEX idx_custom_domains_ssl_expires ON custom_domains(ssl_expires_at)
|
|
WHERE ssl_status = 'ACTIVE' AND is_active = true;
|
|
CREATE INDEX idx_custom_domains_http_challenge_token ON custom_domains(http_challenge_token)
|
|
WHERE http_challenge_token IS NOT NULL;
|
|
CREATE INDEX idx_certificate_cache_expires ON cached_certificates(expires_at);
|