modules/postgresql/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

{ config, lib, pkgs, ... }:

{
  services.postgresql = {
    enable = true;
    enableTCPIP = true;
    ensureUsers = [
      {
        name = "audron";
        ensureClauses.superuser = true;
      }
      {
        name = "d3fus";
        ensureClauses.superuser = true;
      }
    ];
    authentication = pkgs.lib.mkOverride 10 ''
      #type database DBuser origin-address auth-method
      local all      all     trust
      # ipv4
      host  all      all     127.0.0.1/32   trust
      host  all      all     10.10.0.0/24   trust
      host  all      all     10.88.0.0/16   trust
      # ipv6
      host all       all     ::1/128        trust
    '';

    settings = {
      listen_addresses = lib.mkForce "127.0.0.1,10.10.0.1,::1";
    };
  };

  services.prometheus.exporters.postgres.enable = true;
}