Step 1: Create a Read-Only Role in PostgreSQL
Create a Read-Only Role
Create a Read-Only Role
Connect to your database. Change the database and schema names to match your setup. Then create a role for NOFire:
Use a read-only role. NOFire runs every transaction with
default_transaction_read_only=on, and a dedicated role makes that guarantee explicit for auditors.Step 2: Add PostgreSQL Connection to NOFire AI
- Go to Connections. Click Connect on PostgreSQL.
- Enter a Name for the connection (for example,
production-app-db). - Below Name, use the DSN / Host / Database buttons to switch modes. The form opens in DSN mode.
DSN
DSN
- Connection String: masked (for example,
postgresql://reader:[email protected]:5432/app?sslmode=require)
Host / Database
Host / Database
- Host: for example,
db.example.com - Port: defaults to
5432 - Database: for example,
app - User: for example,
readonly_user - Password: masked
- SSL Mode: defaults to
require. Options:disable(no TLS, local dev only),allow,prefer,require(encrypted, no cert check),verify-ca,verify-full(recommended for prod)
5000.
Click Save. NOFire validates the credentials and creates the connection.
