config = lib.mkIf cfg.enable {
nixpkgs.overlays = [ (self: super: rec {
- postgresql = postgresql_11;
- postgresql_11 = super.postgresql_11.overrideAttrs(old: rec {
- passthru = old.passthru // { psqlSchema = "11.0"; };
- configureFlags = old.configureFlags ++ [ "--with-pam" ];
- buildInputs = (old.buildInputs or []) ++ [ self.pam ];
- patches = old.patches ++ [
- ./postgresql_run_socket_path.patch
- ];
- });
+ postgresql = self.postgresql_11_custom;
}) ];
networking.firewall.allowedTCPPorts = [ 5432 ];
'';
};
- mySecrets.keys = [
+ secrets.keys = [
{
dest = "postgresql/pam";
permissions = "0400";