Remove open port for mysql replication

[perso/Immae/Config/Nix.git] / modules / private / databases / default.nix

diff --git a/modules/private/databases/default.nix b/modules/private/databases/default.nix
index 3f7a44bf2d776f45d9dbfbec68f7713a476228c9..73714107ff519ee70d82e3752f033e63429fb0a4 100644 (file)
--- a/modules/private/databases/default.nix
+++ b/modules/private/databases/default.nix
@@ -1,4 +1,4 @@
-{ lib, config, myconfig, ... }:
+{ lib, config, myconfig, nodes, ... }:
 let
   cfg = config.myServices.databases;
 in
@@ -21,6 +21,10 @@ in
         inherit (myconfig.env.ldap) host base;
         inherit (myconfig.env.databases.mysql.pam) dn filter password;
       };
+      replicationLdapConfig = {
+        inherit (myconfig.env.ldap) host base;
+        inherit (myconfig.env.ldap.eldiron) dn password;
+      };
       credentials.root = myconfig.env.databases.mysql.systemUsers.root;
     };
 
@@ -38,8 +42,8 @@ in
         inherit (myconfig.env.databases.postgresql.pam) dn filter password;
       };
       replicationLdapConfig = {
-        inherit (myconfig.env.ldap) host base password;
-        dn = myconfig.env.ldap.host_dn;
+        inherit (myconfig.env.ldap) host base;
+        inherit (myconfig.env.ldap.eldiron) dn password;
       };
       authorizedHosts = {
         immaeEu = [{
@@ -54,6 +58,10 @@ in
           ip4 = [myconfig.env.servers.backup-1.ips.main.ip4];
           ip6 = myconfig.env.servers.backup-1.ips.main.ip6;
         };
+        backup-2 = {
+          ip4 = [myconfig.env.servers.backup-2.ips.main.ip4];
+          ip6 = myconfig.env.servers.backup-2.ips.main.ip6;
+        };
       };
       enable = true;
     };