Moved the PostgreSQL TLS context building to the Service initialiser in the Persistence package.

Services/Website/Sources/App/Extensions/App+Build.swift

@@ -34,11 +34,11 @@ func application(
         logger.warning("String Catalog is \(isCatalogMissing ? "missing" : "undecodable"); pages will serve raw localization keys")
     }
 
-    let persistence = Service(
+    let persistence = try Service(
         driver: reader.driver,
         logger: logger
     )
-    let fluent = try persistence()
+    let fluent = persistence()
 
     let fingerprintAssets = FingerprintAssets(logger: logger)
     let prepareDB = PrepareDB()
@@ -88,12 +88,12 @@ func migration(
         serverName: reader.serverName,
         logLevel: reader.logLevel
     )
-    let service = Service(
+    let service = try Service(
         driver: reader.driver,
         logger: logger
     )
 
-    let fluent = try service()
+    let fluent = service()
     let prepareDB = PrepareDB()
 
     await prepareDB(for: fluent)

Services/Website/Tests/Library/Cases/Public/Controllers/HealthControllerTests.swift

@@ -35,11 +35,11 @@ struct HealthControllerTests {
 
     @Test
     func `serves ready at the readiness path when the database is reachable`() async throws {
-        let service = Service(
+        let service = try Service(
             driver: .inMemory,
             logger: Logger(label: "test")
         )
-        let fluent = try service()
+        let fluent = service()
 
         do {
             try await app(
@@ -69,7 +69,7 @@ struct HealthControllerTests {
     func `serves unavailable at the readiness path when the database is unreachable`() async throws {
         // Port 1 on the loopback interface has nothing listening, so the probe's connection is refused
         // immediately instead of timing out.
-        let service = Service(
+        let service = try Service(
             driver: .postgres(
                 .init(
                     host: "127.0.0.1",
@@ -83,7 +83,7 @@ struct HealthControllerTests {
             ),
             logger: Logger(label: "test")
         )
-        let fluent = try service()
+        let fluent = service()
 
         do {
             try await app(