PostgreSQL - Go Fig Documentation

Guide to Connect PostgreSQL:

Create a dedicated read-only user for Go Fig. (Recommended)
Whitelist Go Fig’s IP address in your firewall or security group settings: 35.185.38.164
Collect the following details:

PostgreSQL host/endpoint (IP address or hostname)
Port number (default: 5432)
Database name
Username and password with read access

1) Create a read-only user (recommended)

Create a dedicated Go Fig user with read-only access so Go Fig never has write access. The example below grants SELECT on the public schema’s current and future tables:

CREATE USER gofig_readonly WITH PASSWORD 'your_secure_password_here';
GRANT CONNECT ON DATABASE your_database TO gofig_readonly;
GRANT USAGE ON SCHEMA public TO gofig_readonly;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO gofig_readonly;
ALTER DEFAULT PRIVILEGES IN SCHEMA public
  GRANT SELECT ON TABLES TO gofig_readonly;

Set a strong password and store it securely. Never use your admin credentials for the connection. For multiple schemas, repeat the USAGE and SELECT grants for each schema.

2) Whitelist Go Fig’s IP address

Go Fig needs network access to your database. Allow 35.185.38.164/32 in your firewall, security group, or pg_hba.conf. For managed databases this is usually an inbound rule on port 5432 (AWS RDS security group, Google Cloud SQL authorized networks, or Azure firewall rules) pointing at Go Fig’s IP.

Self-hosted PostgreSQL (pg_hba.conf)

Add Go Fig’s read-only user and IP to pg_hba.conf:

host    all    gofig_readonly    35.185.38.164/32    md5

Then reload PostgreSQL: sudo systemctl reload postgresql

3) Connect Go Fig to PostgreSQL

Add PostgreSQL connection

Navigate to your Organization Data page and click Add data source. Select PostgreSQL from the list of database connections.

The Connect a new data source modal on the Database tab with the PostgreSQL connector tile highlighted.

Enter connection details

Fill in your PostgreSQL connection information:

Host: Database server hostname or IP address (e.g., postgres.example.com or 10.0.0.1)
Database: Name of the database to connect to (e.g., production, analytics)
Username: PostgreSQL username with read access (must start with a letter or underscore)
Password: Password for the PostgreSQL user
Port: Port number (default: 5432)
SSL Mode: Connection encryption setting
- Require: Always use SSL (recommended, default)
- Prefer: Use SSL if available, fall back to non-SSL
- Allow: Non-SSL preferred, fall back to SSL
- Disable: Never use SSL (not recommended)

The PostgreSQL connection form with Host, Database, Username, Password, Port, and SSL Mode fields.

Confirm IP access

Toggle the Confirm IP Access switch to confirm that you have added Go Fig’s IP address (35.185.38.164) to your PostgreSQL firewall or security group.

You cannot proceed until you confirm that network access has been configured.

Connect to PostgreSQL

Click Connect to complete the setup. Go Fig will verify the connection, then encrypt and store your credentials securely.

Query timeouts: Queries are limited to 90 seconds. If your query times out, add WHERE clauses to filter data, limit rows, or use PostgreSQL indexes to speed up queries.

​1) Create a read-only user (recommended)

​2) Whitelist Go Fig’s IP address

​3) Connect Go Fig to PostgreSQL

1) Create a read-only user (recommended)

2) Whitelist Go Fig’s IP address

3) Connect Go Fig to PostgreSQL