Souss Agri Export: the shipments API returns 500 errors, “authentication refused” on the database

Souss Agri Export, a citrus and early-produce cooperative in the Agadir region (packing stations in Ait Melloul and Taroudant), manages its refrigerated truck shipments with an API, app-sousagri-api (Linux App Service, resource group rg-sousagri-prod, francecentral).

The PostgreSQL database password is never written in the configuration: the DB_PASSWORD setting is a Key Vault reference to kv-sousagri-prod.

Yesterday at 18:40, the team applied a Terraform change to the application (move to a new App Service plan, more memory). This morning, the Ait Melloul station can no longer print loading slips: the API responds 500. The trucks must leave for Tanger Med at 08:00.

You have the Azure CLI with the Owner role on the resource group.