nix/modules/nixos/postgres.nix

40 lines
1 KiB
Nix
Raw Normal View History

2023-10-03 11:52:44 -05:00
{pkgs, ...}: {
2023-09-05 23:11:14 -05:00
# this is really just for development usage
services.postgresql = {
enable = true;
2023-10-03 11:52:44 -05:00
ensureDatabases = ["daniel"];
2023-09-05 23:11:14 -05:00
ensureUsers = [
{
name = "daniel";
ensureDBOwnership = true;
2023-09-05 23:11:14 -05:00
}
];
enableTCPIP = true;
package = pkgs.postgresql_15;
authentication = pkgs.lib.mkOverride 10 ''
#type database DBuser auth-method
local all postgres peer map=superuser_map
local all daniel peer map=superuser_map
local sameuser all peer map=superuser_map
# lan ipv4
host all all 10.0.0.0/24 trust
host all all 127.0.0.1/32 trust
# tailnet ipv4
host all all 100.64.0.0/10 trust
'';
identMap = ''
# ArbitraryMapName systemUser DBUser
superuser_map root postgres
superuser_map postgres postgres
superuser_map daniel postgres
# Let other names login as themselves
superuser_map /^(.*)$ \1
'';
};
}