add baikal to postgres

flake.nix

@@ -192,6 +192,12 @@
                 group = "postgres";
                 mode = "0400";
               };
+              postgres-baikal = {
+                file = ./secrets/postgres-baikal.age;
+                owner = "postgres";
+                group = "postgres";
+                mode = "0400";
+              };
             };
           }
           ./hosts/sql

hosts/sql/postgres.nix

@@ -14,6 +14,7 @@ let
     (mkEntry "hedgedoc" 26) # md.berlin.ccc.de
     (mkEntry "grafana" 14) # monitoring.berlin.ccc.de
     (mkEntry "forgejo" 16) # git.berlin.ccc.de
+    (mkEntry "baikal" 24) # dav.berlin.ccc.de
   ];
   mkEntry = name: octet: {
     user = {

secrets/secrets.nix

@@ -54,11 +54,10 @@ in
     _sql
     _monitoring
   ];
-  "postgres-forgejo.age".publicKeys =
+  "postgres-baikal.age".publicKeys = xengi ++ [
-    xengi
+    _sql
-    ++ shokinn
+    _dav
-    ++ [ _sql ];
+  ];
-
   "www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
   "radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ];
 }