Move secrets module outside of nixops

[perso/Immae/Config/Nix.git] / nixops / modules / databases / postgresql.nix

diff --git a/nixops/modules/databases/postgresql.nix b/nixops/modules/databases/postgresql.nix
index 0afce70ceb8aa22b9311b69f53b36975ab15d721..3a58c48c2716f9514a1fe1977f8fab06fecf46db 100644 (file)
--- a/nixops/modules/databases/postgresql.nix
+++ b/nixops/modules/databases/postgresql.nix
@@ -14,6 +14,10 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
+    nixpkgs.overlays = [ (self: super: rec {
+      postgresql = self.postgresql_11_custom;
+    }) ];
+
     networking.firewall.allowedTCPPorts = [ 5432 ];
 
     security.acme.certs."postgresql" = config.services.myCertificates.certConfig // {
@@ -65,7 +69,7 @@ in {
       '';
     };
 
-    mySecrets.keys = [
+    secrets.keys = [
       {
         dest = "postgresql/pam";
         permissions = "0400";