From 4f369d95ccbf151f50c26c8f96abccb387051625 Mon Sep 17 00:00:00 2001
From: Max Audron <audron@cocaine.farm>
Date: Wed, 2 Apr 2025 16:14:18 +0200
Subject: bind postgresql only to private addresses

---
 modules/postgresql/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/postgresql/default.nix b/modules/postgresql/default.nix
index 3a59337..0e6d372 100644
--- a/modules/postgresql/default.nix
+++ b/modules/postgresql/default.nix
@@ -24,5 +24,9 @@
       # ipv6
       host all       all     ::1/128        trust
     '';
+
+    settings = {
+      listen_addresses = lib.mkForce "127.0.0.1,10.10.0.1,::1";
+    };
   };
 }
-- 
cgit v1.2.3