init

2026-01-11 01:42:54 +00:00 · 2026-01-11 01:42:54 +00:00 · aae151cee6
commit aae151cee6
33 changed files with 1351 additions and 0 deletions
--- a/hosts/makise/system/configuration/postgres.nix
+++ b/hosts/makise/system/configuration/postgres.nix
@ -0,0 +1,31 @@
+{ pkgs
+, ...
+}:
+
+{
+  services.postgresql = {
+    enable = true;
+    package = pkgs.postgresql_18;
+
+    ensureDatabases = [
+      "forgejo"
+    ];
+
+    ensureUsers = [
+      { name = "forgejo"; ensureDBOwnership = true; }
+    ];
+
+    authentication = ''
+      # Socket connections
+      local     forgejo     forgejo                       peer
+
+      # Localhost connections
+      host      forgejo     forgejo     127.0.0.1/32      trust
+      host      forgejo     forgejo     ::1/128           trust
+
+      # Deny everything else
+      host      all         all         0.0.0.0/0         reject
+      host      all         all         ::0/0             reject
+    '';
+  };
+}