jackos1998
5171a10079
Rebase the fork branches and refresh nixpkgs, home-manager, and the approved ancillary inputs. Update kernel and release metadata, adapt removed package and Home Assistant options, and keep Determinate Nix on its tested nixpkgs revision to avoid duplicate Boost patches. Retire Sharry and its public endpoint because copyparty replaces it. Document the GitHub mirror gate and require real devshell and system builds in the upgrade validation workflow.
40 lines
1.7 KiB
Markdown
40 lines
1.7 KiB
Markdown
# colony-psql
|
|
|
|
The shared PostgreSQL instance for colony services. Rather than each service running its own
|
|
database, the containers (and the `git` VM) connect here over the `ctrs` network.
|
|
|
|
- **Source:** [`shill/containers/colony-psql.nix`](../../../../../nixos/boxes/colony/vms/shill/containers/colony-psql.nix)
|
|
- **Host:** NixOS container on [`shill`](../README.md)
|
|
- **nixpkgs:** `mine`
|
|
|
|
## Role
|
|
|
|
- **PostgreSQL 14** with TCP/IP enabled, reachable from the whole colony address space using `md5`
|
|
authentication. The firewall allows `5432`.
|
|
- Local `peer` auth maps `postgres`, `root`, `netdata` and `dev` to the `postgres` superuser via
|
|
the ident map.
|
|
- **netdata** with the Python PostgreSQL collector.
|
|
- Consumers wait for the database to accept connections with the `lib.my.systemdAwaitPostgres`
|
|
helper (e.g. `atticd`, `mastodon-init-db`, and `middleman`'s nginx as a DNS
|
|
bootstrap hack).
|
|
|
|
## Network assignments
|
|
|
|
See the consolidated [network assignments](../../../../networking.md#box-assignments) table (this box: `colony-psql`).
|
|
|
|
The assignment also has the alt name `colony-psql` (no `-ctr` suffix), which is what consumers
|
|
use as the database hostname.
|
|
|
|
## Consumers
|
|
|
|
- [object](object.md) — `hedgedoc` (and `atticd` when enabled) over
|
|
`colony-psql:5432`
|
|
- [toot](toot.md) — Mastodon's database (Mastodon currently disabled)
|
|
- [chatterbox](chatterbox.md) — the mautrix bridges (WhatsApp, Messenger, Instagram) via
|
|
Postgres URIs in their secret env files
|
|
- `git` VM — Gitea
|
|
|
|
## Notable config files
|
|
|
|
- [`nixos/boxes/colony/vms/shill/containers/colony-psql.nix`](../../../../../nixos/boxes/colony/vms/shill/containers/colony-psql.nix) — container definition and PostgreSQL configuration
|