Connect

Private networking

Workloads reach managed Postgres on private DNS. Prefer internal URLs so app traffic never leaves the cluster network.

Screenshot coming soon

External DB access is optional, TLS-terminated, and allowlisted for break-glass or local tools — not the default app path.

Services share a project boundary so wiring DATABASE_URL is a dashboard action, not a public IP scavenger hunt.

Internal by default

Private hosts for in-cluster connections.

Optional external access

TLS + IP allowlist when you need psql from outside.

Credential rotation

Rotate and redeploy consumers from the database page.

Explore more

Custom hosts, TXT verify, automatic certificates.

Split / and /api across services on one hostname.

Connect GitHub — every push builds and ships.

Connect a repo. Deploy Node with Postgres, domains, and previews in one place. No lock-in tax — just the path from push to production.