Ah, that's it. It would definitely be helpful to have more documentation on connection strings in our docs. For example, in this case, I believe you might just need to add "?sslmode=require" to the end of your connection string and disable TLS. Would this work for you?