Add cron backup for LDAP

[perso/Immae/Config/Nix.git] / nixops / modules / databases / default.nix

diff --git a/nixops/modules/databases/default.nix b/nixops/modules/databases/default.nix
index d86373ade13f9fe71d02db895856ca2125ba8842..32001810475af4b5e71f8276b11dc972ccd67283 100644 (file)
--- a/nixops/modules/databases/default.nix
+++ b/nixops/modules/databases/default.nix
@@ -2,6 +2,9 @@
 let
     cfg = config.services.myDatabases;
 in {
+  imports = [
+    ./openldap.nix
+  ];
   options.services.myDatabases = {
     enable = lib.mkEnableOption "my databases service";
     postgresql = {
@@ -105,7 +108,8 @@ in {
       extraConfig = ''
         max_connections = 100
         wal_level = logical
-        shared_buffers = 128MB
+        shared_buffers = 512MB
+        work_mem = 10MB
         max_wal_size = 1GB
         min_wal_size = 80MB
         log_timezone = 'Europe/Paris'
@@ -123,7 +127,9 @@ in {
       authentication = ''
         local  all     postgres                                ident
         local  all     all                                     md5
-        hostssl        all     all             all                     pam
+        hostssl        all     all     188.165.209.148/32              md5
+        hostssl        all     all     178.33.252.96/32                md5
+        hostssl        all     all     all                             pam
         hostssl        replication     backup-1        2001:41d0:302:1100::9:e5a9/128  pam pamservice=postgresql_replication
         hostssl        replication     backup-1        54.37.151.137/32                pam pamservice=postgresql_replication
       '';
@@ -182,6 +188,10 @@ in {
       }
     ];
 
+    ids.uids.redis = myconfig.env.users.redis.uid;
+    ids.gids.redis = myconfig.env.users.redis.gid;
+    users.users.redis.uid = config.ids.uids.redis;
+    users.groups.redis.gid = config.ids.gids.redis;
     services.redis = rec {
       enable = config.services.myDatabases.redis.enable;
       bind = "127.0.0.1";
@@ -195,5 +205,6 @@ in {
       mkdir -p $(dirname ${myconfig.env.databases.redis.socket})
       chown redis $(dirname ${myconfig.env.databases.redis.socket})
     '';
+
   };
 }