c4patino/yumeami
1
0
Fork 0
Code Activity Actions

refactor: update postgresql password and hash file
All checks were successful
ci / treefmt (push) Successful in 2m48s
Details

Browse source
This commit is contained in:
Ceferino Patino 2026-06-30 21:53:41 -05:00
commit 72efc82c2a
Signed by: c4patino
SSH key fingerprint: SHA256:Wu+cU1t+7zVT9wzew/4meNmeulo66NzMqc22MdDBgXI
4 changed files with 13 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

35
modules/nixos/services/storage/postgresql/default.nix
View file

@ -55,30 +55,17 @@ in {
ensureDatabases = hostDatabases;
ensureUsers =
[
{
name = "pgbouncer_auth";
ensureClauses = let
secrets = readJsonOrEmpty "${inputs.self}/secrets/crypt/secrets.json";
hash = getIn "postgresql.pgbouncer_auth.hash" secrets;
in {
login = true;
password = hash;
};
}
]
++ (mainServices
|> map (service: {
name = service;
ensureDBOwnership = true;
ensureClauses = let
secrets = readJsonOrEmpty "${inputs.self}/secrets/crypt/secrets.json";
hash = getIn "postgresql.${service}.hash" secrets;
in {
login = true;
password = hash;
};
}));
mainServices
|> map (service: {
name = service;
ensureDBOwnership = true;
ensureClauses = let
secrets = readJsonOrEmpty "${inputs.self}/secrets/crypt/postgresql.json";
in {
login = true;
password = getIn "${service}.hash" secrets;
};
});
};
postgresqlBackup = {

4
modules/nixos/services/storage/postgresql/pgbouncer.nix
View file

@ -52,8 +52,8 @@ in {
{
name = "pgbouncer_auth";
ensureClauses = let
secrets = readJsonOrEmpty "${inputs.self}/secrets/crypt/secrets.json";
hash = getIn "postgresql.pgbouncer_auth.hash" secrets;
secrets = readJsonOrEmpty "${inputs.self}/secrets/crypt/postgresql.json";
hash = getIn "pgbouncer_auth.hash" secrets;
in {
login = true;
password = hash;

BIN
secrets/crypt/postgresql.json Normal file
View file

Binary file not shown.

BIN
secrets/crypt/secrets.json
View file

Binary file not shown.