RoyDumblauskas/homelab-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

override auth options

Browse Source
This commit is contained in:
RoyDumblauskas
2025-11-19 02:02:16 -06:00
parent a6ded52737
commit c85bdc7e3d
1 changed files with 19 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
homelab-services/postgresql-db/flake.nix
+18 -2
View File
@@ -61,17 +61,33 @@
settings.port = opts.port;
identMap = ''
postgres roy postgres
dev roy devuser
prod roy produser
'';
# allow remote connections to dev DBs
authentication = ''
authentication = pkgs.lib.mkOverride ''
# TYPE DATABASE USER ADDRESS METHOD
# "local" is for Unix domain socket connections only
local all all trust
# IPv4 local connections:
host all all 127.0.0.1/32 trust
# IPv6 local connections:
host all all ::1/128 trust
# Allow replication connections from localhost, by a user with the
# replication privilege.
local replication all trust
host replication all 127.0.0.1/32 trust
host replication all ::1/128 trust
# Connections via LAN
${lib.concatStringsSep " " (map (db: "host ${db}_dev all samenet md5\n") opts.databases) }
'';
};
systemd.services.bootstrap-psql = {
description = "Bootstrap psql dbs and users";
description = "Bootstrap psql databases and users";
after = [ "postgresql.service" ];
requires = [ "postgresql.service" ];
wantedBy = [ "multi-user.target" ];