summaryrefslogtreecommitdiffstats
path: root/nixos/modules/services/databases
diff options
context:
space:
mode:
authorgithub-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>2023-09-27 18:01:33 +0000
committerGitHub <noreply@github.com>2023-09-27 18:01:33 +0000
commitb7f2311d927c4bd2f676bd60a3258a558dc99683 (patch)
tree7ff20e19e9282defeebe42fba08f8541e44d03bf /nixos/modules/services/databases
parentf7e03f48514acdcb5491c87afbcaefebc86b6c70 (diff)
parent7867cf942d47cb3e09c36b40d66342d329562353 (diff)
Merge staging-next into staging
Diffstat (limited to 'nixos/modules/services/databases')
-rw-r--r--nixos/modules/services/databases/postgresql.nix22
1 files changed, 16 insertions, 6 deletions
diff --git a/nixos/modules/services/databases/postgresql.nix b/nixos/modules/services/databases/postgresql.nix
index eb0d72b51864..279b47fffd95 100644
--- a/nixos/modules/services/databases/postgresql.nix
+++ b/nixos/modules/services/databases/postgresql.nix
@@ -106,12 +106,14 @@ in
identMap = mkOption {
type = types.lines;
default = "";
+ example = literalExample ''
+ map-name-0 system-username-0 database-username-0
+ map-name-1 system-username-1 database-username-1
+ '';
description = lib.mdDoc ''
Defines the mapping from system users to database users.
- The general form is:
-
- map-name system-username database-username
+ See the [auth doc](https://postgresql.org/docs/current/auth-username-maps.html).
'';
};
@@ -128,6 +130,11 @@ in
initialScript = mkOption {
type = types.nullOr types.path;
default = null;
+ example = literalExpression ''
+ pkgs.writeText "init-sql-script" '''
+ alter user postgres with password 'myPassword';
+ ''';'';
+
description = lib.mdDoc ''
A file containing SQL statements to execute on first startup.
'';
@@ -465,13 +472,16 @@ in
services.postgresql.dataDir = mkDefault "/var/lib/postgresql/${cfg.package.psqlSchema}";
- services.postgresql.authentication = mkAfter
+ services.postgresql.authentication = mkMerge [
+ (mkBefore "# Generated file; do not edit!")
+ (mkAfter
''
- # Generated file; do not edit!
+ # default value of services.postgresql.authentication
local all all peer
host all all 127.0.0.1/32 md5
host all all ::1/128 md5
- '';
+ '')
+ ];
users.users.postgres =
{ name = "postgres";