62 lines
2.4 KiB
SQL
62 lines
2.4 KiB
SQL
-- Copyright (c) 2025-2026 Probo Inc <hello@probo.com>.
|
|
--
|
|
-- Permission to use, copy, modify, and/or distribute this software for any
|
|
-- purpose with or without fee is hereby granted, provided that the above
|
|
-- copyright notice and this permission notice appear in all copies.
|
|
--
|
|
-- THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
-- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
-- AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
-- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
-- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
-- OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
-- PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
CREATE EXTENSION IF NOT EXISTS citext;
|
|
|
|
CREATE TYPE custom_domain_ssl_status AS ENUM (
|
|
'PENDING',
|
|
'PROVISIONING',
|
|
'ACTIVE',
|
|
'RENEWING',
|
|
'EXPIRED',
|
|
'FAILED'
|
|
);
|
|
|
|
CREATE TABLE custom_domains (
|
|
id TEXT PRIMARY KEY,
|
|
tenant_id TEXT NOT NULL,
|
|
organization_id TEXT NOT NULL REFERENCES organizations(id) ON DELETE CASCADE,
|
|
domain CITEXT NOT NULL UNIQUE,
|
|
ssl_certificate BYTEA,
|
|
encrypted_ssl_private_key BYTEA,
|
|
ssl_certificate_chain TEXT,
|
|
ssl_status custom_domain_ssl_status,
|
|
ssl_expires_at TIMESTAMP WITH TIME ZONE,
|
|
http_challenge_token TEXT,
|
|
http_challenge_key_auth TEXT,
|
|
http_challenge_url TEXT,
|
|
http_order_url TEXT,
|
|
is_active BOOLEAN NOT NULL,
|
|
created_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
updated_at TIMESTAMP WITH TIME ZONE NOT NULL
|
|
);
|
|
|
|
CREATE UNLOGGED TABLE cached_certificates (
|
|
domain CITEXT PRIMARY KEY,
|
|
certificate_pem TEXT NOT NULL,
|
|
private_key_pem TEXT NOT NULL,
|
|
certificate_chain TEXT,
|
|
expires_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
cached_at TIMESTAMP WITH TIME ZONE NOT NULL,
|
|
custom_domain_id TEXT REFERENCES custom_domains(id) ON DELETE CASCADE
|
|
);
|
|
|
|
CREATE INDEX idx_custom_domains_domain ON custom_domains(domain) WHERE is_active = true;
|
|
CREATE INDEX idx_custom_domains_org ON custom_domains(organization_id);
|
|
CREATE INDEX idx_custom_domains_ssl_expires ON custom_domains(ssl_expires_at)
|
|
WHERE ssl_status = 'ACTIVE' AND is_active = true;
|
|
CREATE INDEX idx_custom_domains_http_challenge_token ON custom_domains(http_challenge_token)
|
|
WHERE http_challenge_token IS NOT NULL;
|
|
CREATE INDEX idx_certificate_cache_expires ON cached_certificates(expires_at);
|