jackos1998
a2f3410e42
Add per-site and per-box inventories, consolidate shared network design, and relocate the switch and access-point references under the home site.
40 lines
1.7 KiB
Markdown
40 lines
1.7 KiB
Markdown
# colony-psql
|
|
|
|
The shared PostgreSQL instance for colony services. Rather than each service running its own
|
|
database, the containers (and the `git` VM) connect here over the `ctrs` network.
|
|
|
|
- **Source:** [`shill/containers/colony-psql.nix`](../../../../../nixos/boxes/colony/vms/shill/containers/colony-psql.nix)
|
|
- **Host:** NixOS container on [`shill`](../README.md)
|
|
- **nixpkgs:** `mine`
|
|
|
|
## Role
|
|
|
|
- **PostgreSQL 14** with TCP/IP enabled, reachable from the whole colony address space using `md5`
|
|
authentication. The firewall allows `5432`.
|
|
- Local `peer` auth maps `postgres`, `root`, `netdata` and `dev` to the `postgres` superuser via
|
|
the ident map.
|
|
- **netdata** with the Python PostgreSQL collector.
|
|
- Consumers wait for the database to accept connections with the `lib.my.systemdAwaitPostgres`
|
|
helper (e.g. `sharry`, `atticd`, `mastodon-init-db`, and `middleman`'s nginx as a DNS
|
|
bootstrap hack).
|
|
|
|
## Network assignments
|
|
|
|
See the consolidated [network assignments](../../../../networking.md#box-assignments) table (this box: `colony-psql`).
|
|
|
|
The assignment also has the alt name `colony-psql` (no `-ctr` suffix), which is what consumers
|
|
use as the database hostname.
|
|
|
|
## Consumers
|
|
|
|
- [object](object.md) — `sharry` and `hedgedoc` (and `atticd` when enabled) over
|
|
`colony-psql:5432`
|
|
- [toot](toot.md) — Mastodon's database (Mastodon currently disabled)
|
|
- [chatterbox](chatterbox.md) — the mautrix bridges (WhatsApp, Messenger, Instagram) via
|
|
Postgres URIs in their secret env files
|
|
- `git` VM — Gitea
|
|
|
|
## Notable config files
|
|
|
|
- [`nixos/boxes/colony/vms/shill/containers/colony-psql.nix`](../../../../../nixos/boxes/colony/vms/shill/containers/colony-psql.nix) — container definition and PostgreSQL configuration
|