require SSL on postgres

settings.py

@@ -50,6 +50,9 @@ if get_from_env('DATABASE_URL', None):
     DATABASES['default']['ENGINE'] = 'django.db.backends.postgresql_psycopg2'
     DATABASES['default']['CONN_MAX_AGE'] = 600
 
+    # require SSL
+    DATABASES['default']['OPTIONS'] = {'sslmode': 'require'}
+
 # Local time zone for this installation. Choices can be found here:
 # http://en.wikipedia.org/wiki/List_of_tz_zones_by_name
 # although not all choices may be available on all operating systems.