granular role access

This commit is contained in:
2025-11-23 19:01:32 -06:00
parent 0af530f49c
commit d85483490a
+6 -2
View File
@@ -65,8 +65,12 @@
''; '';
# allow remote connections to dev databases # allow remote connections to dev databases
authentication = '' authentication = pkgs.lib.mkOverride 10 ''
${lib.concatStringsSep " " (map (db: "host ${db}_dev ${db}_devuser 10.0.0.141/24 md5\n") opts.databases) } local all postgres peer map=postgres
local all all peer
# Dev can be connected to via the LAN, Prod only via localhost
${lib.concatStringsSep " " (map (db: "host ${db}_dev ${db}_devuser samenet md5\n") opts.databases) }
${lib.concatStringsSep " " (map (db: "local ${db} ${db}_produser md5\n") opts.databases) } ${lib.concatStringsSep " " (map (db: "local ${db} ${db}_produser md5\n") opts.databases) }
''; '';
}; };