40 lines
995 B
Nix
40 lines
995 B
Nix
|
{ config, pkgs, ... }:
|
||
|
|
{
|
||
|
|
services = {
|
||
|
|
postgresql = {
|
||
|
|
enable = true;
|
||
|
|
ensureDatabases = [ "roundcube" "gitea" ];
|
||
|
|
ensureUsers = [
|
||
|
|
{
|
||
|
|
name = "roundcube";
|
||
|
|
ensureDBOwnership = true;
|
||
|
|
}
|
||
|
|
{
|
||
|
|
name = "gitea";
|
||
|
|
ensureDBOwnership = true;
|
||
|
|
}
|
||
|
|
{
|
||
|
|
name = "root";
|
||
|
|
ensureClauses = {
|
||
|
|
superuser = true;
|
||
|
|
createrole = true;
|
||
|
|
createdb = true;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
];
|
||
|
|
authentication = ''
|
||
|
|
local gitea all ident map=gitea-users
|
||
|
|
'';
|
||
|
|
identMap = ''
|
||
|
|
gitea-users gitea gitea
|
||
|
|
'';
|
||
|
|
initialScript = pkgs.writeText "init" ''
|
||
|
|
GRANT ALL PRIVILEGES ON DATABASE roundcube TO roundcube;
|
||
|
|
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO roundcube;
|
||
|
|
GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO roundcube;
|
||
|
|
GRANT ALL PRIVILEGES ON SCHEMA public TO roundcube;
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|