home/nixos-servers
home/nixos-servers
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

psql-terraform-db #12

Merged
pim merged 6 commits from psql-terraform-db into master 2023-11-25 13:52:24 +00:00
Conversation 0 Commits 6 Files changed 15 +5 -7
1 changed files with 5 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit baa18a1929 - Show all commits

12
modules/custom.nix
View file

@ -64,15 +64,18 @@
"/mnt/data/postgresql/${config.services.postgresql.package.psqlSchema}"; "/mnt/data/postgresql/${config.services.postgresql.package.psqlSchema}";
# TODO: for now trust, replace this with client certificate later # TODO: for now trust, replace this with client certificate later
authentication = '' authentication = ''
hostssl terraformstates all all trust hostssl terraformstates terraform all trust
''; '';
settings = { settings = {
ssl = true; ssl = true;
# TODO: create key pair for server
ssl_cert_file = builtins.toFile "postgresql_server.crt" ssl_cert_file = builtins.toFile "postgresql_server.crt"
(builtins.readFile ../postgresql_server.crt); (builtins.readFile ../postgresql_server.crt);
ssl_key_file = config.age.secrets."postgresql_server.key".path; ssl_key_file = config.age.secrets."postgresql_server.key".path;
}; };
ensureUsers = [{
name = "terraform";
ensurePermissions = { "DATABASE terraformstates" = "ALL PRIVILEGES"; };
}];
}; };
age.secrets."postgresql_server.key" = { age.secrets."postgresql_server.key" = {
@ -81,10 +84,5 @@
owner = builtins.toString config.ids.uids.postgres; owner = builtins.toString config.ids.uids.postgres;
group = builtins.toString config.ids.gids.postgres; group = builtins.toString config.ids.gids.postgres;
}; };
# age.secrets."postgresql_server.key" =
# lib.mkIf config.custom.terraformDatabase.enable {
# file = ../secrets/postgresql_server.key.age;
# };
}; };
} }