35 lines
781 B
Nix
35 lines
781 B
Nix
{ config, ... }:
|
|
{
|
|
users = {
|
|
users.postgres = {
|
|
isSystemUser = true;
|
|
group = "postgres";
|
|
uid = 999;
|
|
};
|
|
groups.postgres = {
|
|
gid = 999;
|
|
};
|
|
};
|
|
|
|
virtualisation.oci-containers.containers = {
|
|
postgres = {
|
|
image = "postgres:16";
|
|
ports = [ "5432:5432" ];
|
|
volumes = [ "/ZFS/media/databases/postgres:/var/lib/postgresql/data" ];
|
|
environment = {
|
|
POSTGRES_USER = "admin";
|
|
POSTGRES_DB = "archive";
|
|
POSTGRES_INITDB_ARGS = "--auth-host=scram-sha-256";
|
|
};
|
|
environmentFiles = [ config.sops.secrets."postgres".path ];
|
|
autoStart = true;
|
|
user = "postgres:postgres";
|
|
};
|
|
};
|
|
|
|
sops = {
|
|
defaultSopsFile = ../secrets.yaml;
|
|
secrets."postgres".owner = "postgres";
|
|
};
|
|
}
|