5171a10079
Rebase the fork branches and refresh nixpkgs, home-manager, and the approved ancillary inputs. Update kernel and release metadata, adapt removed package and Home Assistant options, and keep Determinate Nix on its tested nixpkgs revision to avoid duplicate Boost patches. Retire Sharry and its public endpoint because copyparty replaces it. Document the GitHub mirror gate and require real devshell and system builds in the upgrade validation workflow.
1.7 KiB
1.7 KiB
colony-psql
The shared PostgreSQL instance for colony services. Rather than each service running its own
database, the containers (and the git VM) connect here over the ctrs network.
- Source:
shill/containers/colony-psql.nix - Host: NixOS container on
shill - nixpkgs:
mine
Role
- PostgreSQL 14 with TCP/IP enabled, reachable from the whole colony address space using
md5authentication. The firewall allows5432. - Local
peerauth mapspostgres,root,netdataanddevto thepostgressuperuser via the ident map. - netdata with the Python PostgreSQL collector.
- Consumers wait for the database to accept connections with the
lib.my.systemdAwaitPostgreshelper (e.g.atticd,mastodon-init-db, andmiddleman's nginx as a DNS bootstrap hack).
Network assignments
See the consolidated network assignments table (this box: colony-psql).
The assignment also has the alt name colony-psql (no -ctr suffix), which is what consumers
use as the database hostname.
Consumers
- object —
hedgedoc(andatticdwhen enabled) overcolony-psql:5432 - toot — Mastodon's database (Mastodon currently disabled)
- chatterbox — the mautrix bridges (WhatsApp, Messenger, Instagram) via Postgres URIs in their secret env files
gitVM — Gitea
Notable config files
nixos/boxes/colony/vms/shill/containers/colony-psql.nix— container definition and PostgreSQL configuration