Kabbone/nixos-config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

hydra: add manual psql users

Browse Source
This commit is contained in:
Kabbone 2025-05-11 20:06:13 +02:00
parent 1f16da64e6
commit 54242cf3a0
Signed by: Kabbone
SSH Key Fingerprint: SHA256:A5zPB5I6u5V78V51c362BBdCwhDhfDUVbt7NfKdjWBY
2 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/services/server/hydra.nix
View File

@ -6,6 +6,7 @@
enable = true; enable = true;
hydraURL = "https://hydra.ci.kabtop.de"; hydraURL = "https://hydra.ci.kabtop.de";
listenHost = "127.0.0.1"; listenHost = "127.0.0.1";
port = 3001;
notificationSender = "hydra@kabtop.de"; notificationSender = "hydra@kabtop.de";
useSubstitutes = true; useSubstitutes = true;
minimumDiskFree = 50; minimumDiskFree = 50;
@ -33,7 +34,7 @@
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:3000"; proxyPass = "http://localhost:3001";
extraConfig = '' extraConfig = ''
proxy_set_header X-Forwarded-Port 443; proxy_set_header X-Forwarded-Port 443;
''; '';

10
modules/services/server/postgresql.nix
View File

@ -30,7 +30,15 @@
host signaldb mautrixsignal localhost scram-sha-256 host signaldb mautrixsignal localhost scram-sha-256
host onlyoffice onlyoffice localhost scram-sha-256 host onlyoffice onlyoffice localhost scram-sha-256
local onlyoffice onlyoffice peer local onlyoffice onlyoffice peer
local hydra hydra peer local hydra all ident map=hydra-users
'';
identMap = ''
hydra-users hydra hydra
hydra-users hydra-queue-runner hydra
hydra-users hydra-www hydra
hydra-users root hydra
# The postgres user is used to create the pg_trgm extension for the hydra database
hydra-users postgres postgres
''; '';
initialScript = config.age.secrets."services/postgresql/initScript.sql".path; initialScript = config.age.secrets."services/postgresql/initScript.sql".path;
}; };