Update modules/server/database/default.nix
This commit is contained in:
@@ -5,6 +5,23 @@ let
|
|||||||
listNames = config.syscfg.server.db;
|
listNames = config.syscfg.server.db;
|
||||||
containerNames = lib.concatMap (app: app.requires.databases) (builtins.attrValues config.syscfg.server.loadedContainers);
|
containerNames = lib.concatMap (app: app.requires.databases) (builtins.attrValues config.syscfg.server.loadedContainers);
|
||||||
allApps = lib.unique (listNames ++ containerNames);
|
allApps = lib.unique (listNames ++ containerNames);
|
||||||
|
influxAdminTokenJson = pkgs.writeShellScript "influxdb3-admin-token-json" ''
|
||||||
|
set -eu
|
||||||
|
|
||||||
|
token="''${INFLUXDB_TOKEN-''${INFLUXDB_TOKEN-}}"
|
||||||
|
if [ -z "$token" ]; then
|
||||||
|
echo "Missing INFLUXDB_TOKEN or INFLUXDB_TOKEN in ${config.sops.secrets."INFLUX".path}" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
cat > "$RUNTIME_DIRECTORY/admin-token.json" <<EOF
|
||||||
|
{
|
||||||
|
"token": "$token",
|
||||||
|
"name": "admin",
|
||||||
|
"description": "Admin token for automated deployment"
|
||||||
|
}
|
||||||
|
EOF
|
||||||
|
'';
|
||||||
in {
|
in {
|
||||||
config = lib.mkIf ( builtins.length allApps > 0) {
|
config = lib.mkIf ( builtins.length allApps > 0) {
|
||||||
services.postgresql = {
|
services.postgresql = {
|
||||||
@@ -53,7 +70,10 @@ in {
|
|||||||
};
|
};
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
ExecStart = "${pkgs.influxdb3}/bin/influxdb3 serve"; #--admin-token-file=/run/secrets/admin-token
|
EnvironmentFile = config.sops.secrets."INFLUX".path;
|
||||||
|
RuntimeDirectory = "influxdb3";
|
||||||
|
ExecStartPre = influxAdminTokenJson;
|
||||||
|
ExecStart = "${pkgs.influxdb3}/bin/influxdb3 serve --admin-token-file=%t/influxdb3/admin-token.json";
|
||||||
Restart = "on-failure";
|
Restart = "on-failure";
|
||||||
StateDirectory = "influxdb3";
|
StateDirectory = "influxdb3";
|
||||||
PrivateTmp = true;
|
PrivateTmp = true;
|
||||||
@@ -61,12 +81,6 @@ in {
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# admin-token.json= {
|
|
||||||
# "token": "$INFLUXDB_TOKEN",
|
|
||||||
# "name": "admin",
|
|
||||||
# "description": "Admin token for automated deployment"
|
|
||||||
# }
|
|
||||||
|
|
||||||
|
|
||||||
systemd.services.postgresql-init = {
|
systemd.services.postgresql-init = {
|
||||||
description = "Custom Postgres Setup (Ownership & Passwords)";
|
description = "Custom Postgres Setup (Ownership & Passwords)";
|
||||||
|
|||||||
Reference in New Issue
Block a user