]>
Commit | Line | Data |
---|---|---|
1 | { lib, config, secrets, ... }: | |
2 | let | |
3 | cfg = config.myServices.databases; | |
4 | in | |
5 | { | |
6 | options.myServices = { | |
7 | databases.enable = lib.mkEnableOption "my databases service"; | |
8 | }; | |
9 | ||
10 | config.myServices.dns.zones."immae.eu".subdomains.db-1 = lib.mkIf cfg.enable (with config.myServices.dns.helpers; ips servers.eldiron.ips.main); | |
11 | config.myServices.databases = lib.mkIf cfg.enable { | |
12 | ||
13 | mariadb = { | |
14 | enable = true; | |
15 | ldapConfig = { | |
16 | inherit (config.myEnv.ldap) host base; | |
17 | inherit (config.myEnv.databases.mysql.pam) dn filter password; | |
18 | }; | |
19 | replicationLdapConfig = { | |
20 | inherit (config.myEnv.ldap) host base; | |
21 | inherit (config.myEnv.servers.eldiron.ldap) dn password; | |
22 | }; | |
23 | credentials.root = config.myEnv.databases.mysql.systemUsers.root; | |
24 | }; | |
25 | ||
26 | openldap = { | |
27 | accessFile = secrets.ldap-conf; | |
28 | baseDn = config.myEnv.ldap.base; | |
29 | rootDn = config.myEnv.ldap.root_dn; | |
30 | rootPw = config.myEnv.ldap.root_pw; | |
31 | enable = true; | |
32 | }; | |
33 | ||
34 | postgresql = { | |
35 | ldapConfig = { | |
36 | inherit (config.myEnv.ldap) host base; | |
37 | inherit (config.myEnv.databases.postgresql.pam) dn filter password; | |
38 | }; | |
39 | replicationLdapConfig = { | |
40 | inherit (config.myEnv.ldap) host base; | |
41 | inherit (config.myEnv.servers.eldiron.ldap) dn password; | |
42 | }; | |
43 | authorizedHosts = { | |
44 | }; | |
45 | replicationHosts = { | |
46 | backup-2 = { | |
47 | ip4 = config.myEnv.servers.backup-2.ips.main.ip4; | |
48 | ip6 = config.myEnv.servers.backup-2.ips.main.ip6; | |
49 | }; | |
50 | }; | |
51 | enable = true; | |
52 | }; | |
53 | ||
54 | redis.enable = true; | |
55 | }; | |
56 | } |