xengi/infra
0
1
Fork 0
Code Pull requests Activity Actions

final pqsl setup

Browse source
This commit is contained in:
XenGi 2026-02-06 22:07:31 +01:00
parent 0f9c1accf1
commit 51d225e7b4
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/sql/default.nix
View file

@ -5,6 +5,7 @@
../common.nix ../common.nix
../../services/openssh.nix ../../services/openssh.nix
../../services/postgres.nix ../../services/postgres.nix
./postgres.nix
]; ];
networking = { networking = {

7
hosts/sql/postgres.nix
View file

@ -5,10 +5,9 @@ let
# Create postgres-<username> entry in agenix # Create postgres-<username> entry in agenix
# mkEntry <username> <last IP address octet> # mkEntry <username> <last IP address octet>
entries = [ entries = [
(mkEntry "matrix-synapse" 25) (mkEntry "matrix-synapse" 25) # matrix.berlin.ccc.de
(mkEntry "hedgedoc" 24) (mkEntry "hedgedoc" 26) # md.berlin.ccc.de
]; ];
mkEntry = name: octet: { mkEntry = name: octet: {
user = { user = {
name = name; name = name;
@ -48,7 +47,7 @@ in
# }; # };
#}; #};
postgresql = { postgresql = {
#enableTCPIP = true; enableTCPIP = true;
#settings = { #settings = {
# ssl = "on"; # ssl = "on";
# ssl_cert_file = "${config.security.acme.certs."${fqdn}".directory}/server.crt"; # ssl_cert_file = "${config.security.acme.certs."${fqdn}".directory}/server.crt";