31 lines
641 B
Nix
31 lines
641 B
Nix
{ lib, pkgs, config, ... }:
|
|
|
|
{
|
|
systemd.services.forgejo = {
|
|
after = [ "postgresql.service" ];
|
|
requires = [ "postgresql.service" ];
|
|
};
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
ensureDatabases = [ "forgejo" ];
|
|
ensureUsers = [
|
|
{
|
|
name = "forgejo";
|
|
ensureDBOwnership = true;
|
|
}
|
|
];
|
|
authentication = pkgs.lib.mkOverride 10 ''
|
|
#type database DBuser auth-method
|
|
local all all trust
|
|
'';
|
|
};
|
|
|
|
services.prometheus.exporters.postgres = {
|
|
enable = true;
|
|
listenAddress = "0.0.0.0";
|
|
port = 9187;
|
|
};
|
|
networking.firewall.allowedTCPPorts = [ 9187 ];
|
|
|
|
}
|