SSL to selfhoste supabase postgress?

layer4 {
    :5432

    @postgres {
        tls
        sni supabasedb.domain.com
    }

    route @postgres {
        tls {
            connection_policy {
                alpn postgresql
            }
        }
        proxy {
            upstream {{upstreams 5432}}
        }
    }
}