snowflake/hosts/arashi/services/postgresql.nix
2024-02-01 07:38:45 -05:00

69 lines
1.4 KiB
Nix

{
pkgs,
lib,
...
}: {
networking.firewall.allowedTCPPorts = [5432];
services.postgresql = {
enable = true;
enableTCPIP = true;
package = pkgs.postgresql_14;
port = 5432;
settings = {
listen_addresses = lib.mkForce "*";
max_connections = "300";
shared_buffers = "80MB";
};
authentication = ''
local all all trust
host replication all 127.0.0.1/32 trust
host all all all trust
'';
ensureUsers = [
{
name = "hedgedoc";
ensureDBOwnership = true;
}
{
name = "forgejo";
ensureDBOwnership = true;
}
{
name = "grafana";
ensureDBOwnership = true;
}
{
name = "authelia";
ensureDBOwnership = true;
}
{
name = "vaultwarden";
ensureDBOwnership = true;
}
{
name = "attic";
ensureDBOwnership = true;
}
{
name = "miniflux";
ensureDBOwnership = true;
}
];
ensureDatabases = [
"forgejo"
"hedgedoc"
"grafana"
"authelia"
"vaultwarden"
"attic"
"miniflux"
];
};
services.postgresqlBackup = {
enable = true;
databases = ["forgejo" "hedgedoc" "grafana" "authelia" "vaultwarden" "attic" "miniflux"];
compression = "zstd";
compressionLevel = 4;
startAt = "*-*-* 23:00:00";
};
}