31 lines
742 B
Nix
31 lines
742 B
Nix
{ config, lib, pkgs, ... }:
|
|
{
|
|
services.postgresql = {
|
|
enable = true;
|
|
|
|
ensureDatabases = [ "vaultwarden" "hedgedoc" ];
|
|
authentication = pkgs.lib.mkOverride 10 ''
|
|
#type database DBuser IP Range auth-method
|
|
local all all trust
|
|
host all all ::1/128 trust
|
|
host all all 127.0.0.1/32 trust
|
|
'';
|
|
|
|
# When removing users or removing permissions from users here, must also remove them manually
|
|
ensureUsers = [
|
|
{
|
|
name = "vaultwarden";
|
|
ensureDBOwnership = true;
|
|
}
|
|
{
|
|
name = "hedgedoc";
|
|
ensureDBOwnership = true;
|
|
}
|
|
];
|
|
|
|
|
|
settings = {
|
|
port = 5432;
|
|
};
|
|
};
|
|
}
|