From f9952abd5431f3f0af2711f16dce414bd7613888 Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Sat, 20 Jun 2026 00:42:12 +0200
Subject: [PATCH] add baikal to postgres

---
 flake.nix                   |   6 ++++++
 hosts/sql/postgres.nix      |   1 +
 secrets/postgres-baikal.age | Bin 0 -> 1047 bytes
 secrets/secrets.nix         |   9 ++++-----
 4 files changed, 11 insertions(+), 5 deletions(-)
 create mode 100644 secrets/postgres-baikal.age

diff --git a/flake.nix b/flake.nix
index 89049f9..f2f73ff 100644
--- a/flake.nix
+++ b/flake.nix
@@ -192,6 +192,12 @@
                 group = "postgres";
                 mode = "0400";
               };
+              postgres-baikal = {
+                file = ./secrets/postgres-baikal.age;
+                owner = "postgres";
+                group = "postgres";
+                mode = "0400";
+              };
             };
           }
           ./hosts/sql
diff --git a/hosts/sql/postgres.nix b/hosts/sql/postgres.nix
index cd1fa90..fb46209 100644
--- a/hosts/sql/postgres.nix
+++ b/hosts/sql/postgres.nix
@@ -14,6 +14,7 @@ let
     (mkEntry "hedgedoc" 26) # md.berlin.ccc.de
     (mkEntry "grafana" 14) # monitoring.berlin.ccc.de
     (mkEntry "forgejo" 16) # git.berlin.ccc.de
+    (mkEntry "baikal" 24) # dav.berlin.ccc.de
   ];
   mkEntry = name: octet: {
     user = {
diff --git a/secrets/postgres-baikal.age b/secrets/postgres-baikal.age
new file mode 100644
index 0000000000000000000000000000000000000000..8624f2243972c29d70782aeecef3039b38b0636a
GIT binary patch
literal 1047
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSH_0Y~UELSKD4lvB}
z$tgB8^vO1NNvt$APp&dbGV{nzFG~#e2o81hDG3es3o0yfH{r@EOLEPv%q??t4G+!t
z^GS0ut1Q>g3Un+f_BM(%2{tz{$n#ClEU1hOibS`~wah0eyj&qGB_ce<B+D$UD$vP2
zw5-xC*up<V-!H(+I6NRZIMO6C&n(5W)HO8ODVxjHEV$Ia!ZqEsG}9}>*d;63G0`_Q
z-!LyM(8SQa#KJ7y(BI7`-^9_~Bp=<j6kqK$pFoA|<Vtrpk6?XI_xvn#$0B{BP}g8f
z({i^W&vfk+i;MshH_xP`%)%u1%51KZY)230pd2GFi!i6kAdftAkB|aOZ^xieS95>2
zT;mLv+={@!;L56Ue*<*evMR!TjRF<2jJ^EximUv?49cqfeGPIgDvi9;ihV<U!;I7X
zGMzngip{iBjhzF+EAqL*e0)pI)6%Mn^HWNL%3O@RstmJ>(?hb&{3;E?Ej@fZa>~q-
z!?d#s%`j}!uXGM|PFIN1b}>z>EDA0)D+=-qNpi_DDGhaXFHZM!HmS<1^mfwD4or56
za4!na&F6A;G_ES}GAT+nH1pQ?$jo&~F{tn;HPrVr@yn}pPBALY2~G0LG!M+s#|TL`
z_X1PHbcKxYRBe-r%nXAHvn+ilmqhRE@^UwKrxYKbe53RbKQq%*1CLB&XYJxVSFS_@
z-^ffCi=1NTAY;?~<n+wQ%qU}z%s}_js)D2dGk4$O;J|#da3c?|K=hFGG;&LJ3RH-!
z$Z>YhGcbz?_6+w)N=nYk$?(fADNS`L%QG`FNi6p+_4Ra0PK&GvE#|VUFv<4LFDWR_
zF)xiU_0RD3F3vD=@ybZ{cQ;PX_co{s&Ght4@+!&pGeNh_$)mthyIi5nE2qG>G||g9
z)zBp*CA}!v+bz>1DWsqxGvClT%GW6++s`n^G&r-wFqzA=INR0O)669=!_7!PG1xaT
zBcdYT*fS$6F*nF3J2WZ7$jihqD7VrrFP%$QS689H(X}ea*W05+J5xW^(kZhlFSjT+
zyecvyFW)dE-8s=K)V##SE6B4fGN0>5pwG0zGR4@f7j`$DDVsOLk#oVLxh4FP3mGew
zj(J@v*y{XEtD^Vwoc74AQGPtu49SzF^zz!5UV61QH0|=1U5XAn-jy>v4RBkqKQH5H
ZDdR<5$u);VkCr5d^m8rUbs}urCjh~=U19(L

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 655aa73..c6bac82 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -54,11 +54,10 @@ in
     _sql
     _monitoring
   ];
-  "postgres-forgejo.age".publicKeys =
-    xengi
-    ++ shokinn
-    ++ [ _sql ];
-
+  "postgres-baikal.age".publicKeys = xengi ++ [
+    _sql
+    _dav
+  ];
   "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
   "radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ];
 }