dotfiles/nixng/containers/hydra/postgresql.nix

{ makeSystem
, nixpkgs
}:
let
  inherit (nixpkgs.lib)
    singleton;
in
makeSystem {
  system = "x86_64-linux";
  name = "nixng-hydra-postgresql";
  inherit nixpkgs;
  config = { pkgs, config, ... }:
    {
      config = {
        dumb-init = {
          enable = true;
          type.services = {};
        };
        services.postgresql = {
          enable = true;
          package = pkgs.postgresql_12;

          initialScript = "/secrets/init.sql";
          enableTCPIP = true;

          authentication = "host  all all all          md5";

          config = {
            max_connections = 1024;
          };

          ensureDatabases = [ "hydra" ];
          ensureExtensions = {
            "pg_trgm" = [ "hydra" ];
          };
          ensureUsers = singleton {
            name = "hydra";
            ensurePermissions = {
              "DATABASE \"hydra\"" = "ALL PRIVILEGES";
            };
          };
        };
      };
    };
}