feat: change zammad domain

hosts/AZ-CLD-1/services/pgbouncer.nix

@@ -22,11 +22,17 @@
     log_connections = 1;
     log_disconnections = 1;
 
+    client_tls_sslmode = "require";
+    client_tls_cert_file = config.age.secrets.pgbouncer-tls-cert.path;
+    client_tls_key_file = config.age.secrets.pgbouncer-tls-key.path;
+    client_tls_protocols = "secure";
+
     server_reset_query = "DISCARD ALL";
     server_check_query = "SELECT 1";
     server_check_delay = 30;
 
-    server_tls_sslmode = "prefer";
+    server_tls_sslmode = "require";
+    server_tls_protocols = "secure";
   };
 
   mkDatabases = dbs:
@@ -92,11 +98,13 @@ in {
     admin_users = ${commonSettings.admin_users}
     stats_users = ${commonSettings.stats_users}
 
+    client_tls_sslmode = ${commonSettings.client_tls_sslmode}
+    client_tls_cert_file = ${commonSettings.client_tls_cert_file}
+    client_tls_key_file = ${commonSettings.client_tls_key_file}
+    client_tls_protocols = ${commonSettings.client_tls_protocols}
+
     max_client_conn = 300
-    # session-Mode: 1 Client-Conn = 1 Server-Conn. zammad_hr haelt via mehrere
-    # Prozesse (rails+scheduler+websocket) real ~15 Conns -> pro (user,db) 15.
-    # outline/vaultwarden schoepfen das nie aus (eigene Slots je user,db).
-    default_pool_size = 15
+    default_pool_size = 30
     min_pool_size = 1
     query_wait_timeout = 30
 
@@ -105,7 +113,8 @@ in {
     server_reset_query = DISCARD ALL
     server_check_query = SELECT 1
     server_check_delay = 30
-    server_tls_sslmode = prefer
+    server_tls_sslmode = ${commonSettings.server_tls_sslmode}
+    server_tls_protocols = ${commonSettings.server_tls_protocols}
 
     # PID/Socket getrennt von der Haupt-Instanz halten.
     pidfile = /run/pgbouncer-session/pgbouncer.pid