From ab78412882234c12570a37b10eb1a5bd4e99d270 Mon Sep 17 00:00:00 2001
From: Jack Carter <128555021+SunsetDrifter@users.noreply.github.com>
Date: Wed, 23 Sep 2026 18:04:55 +0200
Subject: [PATCH] docs: tighten the sslmode troubleshooting entry

---
 .../maintenance/scaling/high-availability-from-installer.mdx    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/pages/selfhosted/maintenance/scaling/high-availability-from-installer.mdx b/src/pages/selfhosted/maintenance/scaling/high-availability-from-installer.mdx
index 8ff49d35..4395ca8e 100644
--- a/src/pages/selfhosted/maintenance/scaling/high-availability-from-installer.mdx
+++ b/src/pages/selfhosted/maintenance/scaling/high-availability-from-installer.mdx
@@ -333,7 +333,7 @@ Your PostgreSQL endpoint runs a version older than 17. The installer's backup co
 
 ### The server stops at startup with `failed to create embedded IDP service` and `x509: certificate signed by unknown authority`
 
-The DSNs use `sslmode=verify-ca` or `verify-full` with `sslrootcert`. The main database connection accepts that, but the embedded identity provider ignores `sslrootcert` and checks the database's certificate against the system trust store. Use `sslmode=require`, as in Step 1.
+The DSNs use `sslmode=verify-ca` or `verify-full` with `sslrootcert`. The embedded identity provider ignores `sslrootcert` and checks the database's certificate against the system trust store. Use `sslmode=require`, as in Step 1.
 
 ### `profile: command not found` when reading `.env`