Fix asyncpg SSL - use connect_args instead of URL param

Author: vtz

backend/app/config.py

@@ -25,16 +25,18 @@ class Settings(BaseSettings):
     @field_validator("database_url", mode="before")
     @classmethod
     def fix_database_url(cls, v: str) -> str:
-        """Convert postgres:// to postgresql:// and add sslmode for Railway."""
+        """Convert postgres:// to postgresql:// for SQLAlchemy compatibility."""
         if not v:
             return v
         # Fix postgres:// to postgresql://
         if v.startswith("postgres://"):
             v = v.replace("postgres://", "postgresql://", 1)
-        # Add sslmode=disable for Railway internal connections if not present
-        if "sslmode=" not in v and "ssl=" not in v:
-            separator = "&" if "?" in v else "?"
-            v = f"{v}{separator}sslmode=disable"
+        # Remove sslmode parameter if present (asyncpg doesn't support it in URL)
+        if "sslmode=" in v:
+            import re
+            v = re.sub(r'[?&]sslmode=[^&]*', '', v)
+            # Clean up double && or trailing ?
+            v = v.replace('&&', '&').rstrip('?').rstrip('&')
         return v
 
     # Security

backend/app/db/session.py

@@ -17,10 +17,12 @@
     DATABASE_URL = DATABASE_URL.replace("sqlite://", "sqlite+aiosqlite://", 1)
 
 # Create async engine
+# For Railway internal connections, disable SSL
 engine = create_async_engine(
     DATABASE_URL,
     echo=settings.debug,
     future=True,
+    connect_args={"ssl": False} if "railway.internal" in DATABASE_URL else {},
 )
 
 # Create async session factory