extern/nix-config
1
0
Fork 1
mirror of https://github.com/donovanglover/nix-config.git synced 2025-08-17 02:01:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

meta: Handle postgres at the system level

Browse Source 
This makes sense since postgres is a service that runs on the system.
This commit is contained in:
Donovan Glover
2024-04-09 09:25:30 -04:00
parent bfd55ef40a
commit 58df5018da
2 changed files with 21 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
modules/system.nix
View File

@ -4,7 +4,7 @@ let
inherit (lib) mkOption mkEnableOption mkIf singleton;
inherit (lib.types) nullOr str listOf;
inherit (pkgs.nixVersions) nix_2_19;
inherit (cfg) username iHaveLotsOfRam hashedPassword mullvad allowSRB2Port allowZolaPort noRoot;
inherit (cfg) username iHaveLotsOfRam hashedPassword mullvad allowSRB2Port allowZolaPort noRoot postgres;
inherit (builtins) attrValues;
cfg = config.modules.system;
@ -55,6 +55,7 @@ in
noRoot = mkEnableOption "disable access to root";
mullvad = mkEnableOption "mullvad vpn";
postgres = mkEnableOption "postgres database for containers";
allowSRB2Port = mkEnableOption "port for srb2";
allowZolaPort = mkEnableOption "port for zola";
@ -207,11 +208,23 @@ in
};
};
services.resolved.llmnr = "false";
services = {
resolved.llmnr = "false";
services.mullvad-vpn = mkIf mullvad {
enable = true;
enableExcludeWrapper = false;
mullvad-vpn = mkIf mullvad {
enable = true;
enableExcludeWrapper = false;
};
postgresql = mkIf postgres {
enable = true;
ensureUsers = singleton {
name = username;
};
ensureDatabases = [ username ];
};
};
environment.systemPackages = with pkgs; [