feat: postgres tcp/ip not explicitly enabled, firewall updates

This commit is contained in:
Daniel Flanagan 2024-05-23 09:41:53 -05:00
parent 977b6940cf
commit ed675db195
5 changed files with 18 additions and 8 deletions

View file

@ -9,6 +9,7 @@
environment.systemPackages = with pkgs; [
taplo # toml language server for editing helix configs per repo
pgcli
oil
watchexec
android-tools

View file

@ -9,7 +9,7 @@
ensureDBOwnership = true;
}
];
enableTCPIP = true;
# enableTCPIP = true;
package = pkgs.postgresql_15;
@ -29,11 +29,12 @@
identMap = ''
# ArbitraryMapName systemUser DBUser
superuser_map root postgres
superuser_map postgres postgres
superuser_map daniel postgres
# Let other names login as themselves
superuser_map /^(.*)$ \1
superuser_map root postgres
superuser_map postgres postgres
superuser_map daniel postgres
# Let other names login as themselves
superuser_map /^(.*)$ \1
'';
};

View file

@ -1025,6 +1025,14 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
# listenPort = 6767;
# };
networking.firewall.allowedUDPPorts = [9876 9877];
networking.firewall.allowedUDPPortRanges = [
{
from = 27000;
to = 27100;
}
];
home-manager.users.daniel.home.stateVersion = "24.05";
system.stateVersion = "22.05";
}

View file

@ -26,7 +26,7 @@ in {
kde-plasma
podman
lutris
# postgres
postgres
wifi
hyprland
steam

View file

@ -179,7 +179,7 @@ in {
networking.extraHosts = ''
127.0.0.1 localhost
127.0.1.1 router.h.lyte.dev router
${ip} router.h.lyte.dev router
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes