diff --git a/defaults/main.yml b/defaults/main.yml
index bdbbf33..8d0f14e 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -36,6 +36,7 @@ gitea_disable_registration: true
 gitea_postgres_enabled: False
 gitea_postgres_service: postgresql.service
 gitea_postgres_tls_enabled: False
+# gitea_postgres_ssl_mode: disabled
 gitea_postgres_server: postgres.example.com
 gitea_postgres_port: 5432
 gitea_postgres_superuser: postgres
diff --git a/templates/custom/conf/app.ini.j2 b/templates/custom/conf/app.ini.j2
index 25ba1a9..29ef998 100644
--- a/templates/custom/conf/app.ini.j2
+++ b/templates/custom/conf/app.ini.j2
@@ -92,7 +92,7 @@ HOST     = {{ gitea_postgres_server }}:{{ gitea_postgres_port }}
 NAME     = {{ gitea_postgres_db.name }}
 USER     = {{ gitea_postgres_user.name }}
 PASSWD   = {{ gitea_postgres_user.password }}
-SSL_MODE = {{ 'enabled' if gitea_postgres_tls_enabled else 'disable' }}
+SSL_MODE = {{ gitea_postgres_ssl_mode | default('disabled') }}
 {% endif %}
 
 [indexer]