AZ-Intec-GmbH/AZ-NIX
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vaultwarden postgres migration

Browse Source
This commit is contained in:
sascha.koenig 2025-08-13 12:51:51 +02:00
parent 7a0c3428b6
commit 42eef43a01
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
hosts/AZ-CLD-1/services/postgres.nix
View File

@ -25,12 +25,17 @@
CREATE USER outline WITH ENCRYPTED PASSWORD 'outline'; CREATE USER outline WITH ENCRYPTED PASSWORD 'outline';
CREATE DATABASE outline; CREATE DATABASE outline;
ALTER DATABASE outline OWNER to outline; ALTER DATABASE outline OWNER to outline;
CREATE USER vaultwarden WITH ENCRYPTED PASSWORD 'vaultwarden';
CREATE DATABASE vaultwarden;
ALTER DATABASE vaultwarden OWNER to vaultwarden;
''; '';
authentication = pkgs.lib.mkOverride 10 '' authentication = pkgs.lib.mkOverride 10 ''
# Local connections (Unix socket) # Local connections (Unix socket)
local all postgres peer local all postgres peer
local outline outline scram-sha-256
local n8n n8n scram-sha-256 local n8n n8n scram-sha-256
local outline outline scram-sha-256
local vaultwarden vaultwarden scram-sha-256
# Localhost connections (IPv4 and IPv6) # Localhost connections (IPv4 and IPv6)
host all postgres 127.0.0.1/32 scram-sha-256 host all postgres 127.0.0.1/32 scram-sha-256
@ -55,7 +60,7 @@
services.postgresqlBackup = { services.postgresqlBackup = {
enable = true; enable = true;
startAt = "03:10:00"; startAt = "03:10:00";
databases = ["baserow" "kestra" "n8n" "outline"]; databases = ["baserow" "kestra" "n8n" "outline" "vaultwarden"];
}; };
networking.firewall = { networking.firewall = {
extraCommands = '' extraCommands = ''

1
hosts/AZ-CLD-1/services/vaultwarden.nix
View File

@ -1,7 +1,6 @@
{config, ...}: { {config, ...}: {
services.vaultwarden = { services.vaultwarden = {
enable = true; enable = true;
backupDir = "/var/backup/vaultwarden";
config = { config = {
ROCKET_ADDRESS = "127.0.0.1"; ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 3032; ROCKET_PORT = 3032;