33 lines
992 B
Nix
33 lines
992 B
Nix
{ config, pkgs, ... }: {
|
|
services = {
|
|
prometheus.exporters.postgres = {
|
|
enable = true;
|
|
listenAddress = config.nodeconfig.facts.wireguard-ip;
|
|
port = 9187;
|
|
runAsLocalSuperUser = true;
|
|
};
|
|
postgresql = {
|
|
enable = true;
|
|
dataDir = "/mnt/data/postgresql/${config.services.postgresql.package.psqlSchema}";
|
|
authentication = pkgs.lib.mkOverride 10 ''
|
|
local all all trust
|
|
host all all 127.0.0.1/8 trust
|
|
host all all ::1/128 trust
|
|
host all all 10.10.10.0/24 trust
|
|
host all all fd7c:585c:c4ae::0/64 trust
|
|
'';
|
|
ensureDatabases = [ "dendrite" "forgejo" ];
|
|
ensureUsers = [
|
|
{
|
|
name = "dendrite";
|
|
ensureDBOwnership = true;
|
|
}
|
|
{
|
|
name = "forgejo";
|
|
ensureDBOwnership = true;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
systemd.services.postgresql.unitConfig.RequiresMountsFor = [ "/mnt/data" ];
|
|
}
|