···

       
259
       
 
       
    wantedBy = [ "multi-user.target" ];

     

       
260
       
 
       
    after = [

     

       
261
       
 
       
      "network.target"

     

       
262
       
-
       
      "postgresql.service"

     

       
263
       
 
       
    ];

     

       
264
       
 
       
    # note that if you are connecting to a postgres instance on a different host

     

       
265
       
-
       
    # postgresql.service should not be included in the requires.

     

       
266
       
 
       
    requires = [

     

       
267
       
 
       
      "network-online.target"

     

       
268
       
-
       
      "postgresql.service"

     

       
269
       
 
       
    ];

     

       
270
       
 
       
    description = "my app";

     

       
271
       
 
       
    environment = {

     

···

       
259
       
 
       
    wantedBy = [ "multi-user.target" ];

     

       
260
       
 
       
    after = [

     

       
261
       
 
       
      "network.target"

     

       
262
       
+
       
      "postgresql.target"

     

       
263
       
 
       
    ];

     

       
264
       
 
       
    # note that if you are connecting to a postgres instance on a different host

     

       
265
       
+
       
    # postgresql.target should not be included in the requires.

     

       
266
       
 
       
    requires = [

     

       
267
       
 
       
      "network-online.target"

     

       
268
       
+
       
      "postgresql.target"

     

       
269
       
 
       
    ];

     

       
270
       
 
       
    description = "my app";

     

       
271
       
 
       
    environment = {

     

···

       
1316
       
 
       
  "module-services-postgres-initializing-extra-permissions": [

     

       
1317
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions"

     

       
1318
       
 
       
  ],

     

       
1319
       
-
       
  "module-services-postgres-initializing-extra-permissions-superuser": [

     

       
1320
       
-
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser"

     

       
1321
       
-
       
  ],

     

       
1322
       
 
       
  "module-services-postgres-initializing-extra-permissions-superuser-post-start": [

     

       
1323
       
-
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser-post-start"

     

       
1324
       
-
       
  ],

     

       
1325
       
-
       
  "module-services-postgres-initializing-extra-permissions-superuser-oneshot": [

     

       
1326
       
-
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser-oneshot"

     

       
1327
       
-
       
  ],

     

       
1328
       
-
       
  "module-services-postgres-initializing-extra-permissions-service-user": [

     

       
1329
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user"

     

       
1330
       
 
       
  ],

     

       
1331
       
-
       
  "module-services-postgres-initializing-extra-permissions-service-user-pre-start": [

     

       
1332
       
-
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user-pre-start"

     

       
1333
       
-
       
  ],

     

       
1334
       
-
       
  "module-services-postgres-initializing-extra-permissions-service-user-oneshot": [

     

       
1335
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user-oneshot"

     

       
1336
       
 
       
  ],

     

       
1337
       
 
       
  "module-services-postgres-authentication": [

     

···

       
1316
       
 
       
  "module-services-postgres-initializing-extra-permissions": [

     

       
1317
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions"

     

       
1318
       
 
       
  ],

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
1319
       
 
       
  "module-services-postgres-initializing-extra-permissions-superuser-post-start": [

     

       
1320
       
+
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser-post-start",

     

       
1321
       
+
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser",

     

       
1322
       
+
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user-pre-start",

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
1323
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user"

     

       
1324
       
 
       
  ],

     

       
1325
       
+
       
  "module-services-postgres-initializing-extra-permissions-superuser-oneshot": [

     

       
1326
       
+
       
    "index.html#module-services-postgres-initializing-extra-permissions-superuser-oneshot",

     

       
0
       
 
       

     

       
0
       
 
       

     

       
1327
       
 
       
    "index.html#module-services-postgres-initializing-extra-permissions-service-user-oneshot"

     

       
1328
       
 
       
  ],

     

       
1329
       
 
       
  "module-services-postgres-authentication": [

     

···

       
64
       
 
       


     

       
65
       
 
       
- The `yeahwm` package and `services.xserver.windowManager.yeahwm` module were removed due to the package being broken and unmaintained upstream.

     

       
66
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
67
       
 
       
- The `services.siproxd` module has been removed as `siproxd` is unmaintained and broken with libosip 5.x.

     

       
68
       
 
       


     

       
69
       
 
       
- `services.dwm-status.extraConfig` was replaced by [RFC0042](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md)-compliant [](#opt-services.dwm-status.settings), which is used to generate the config file. `services.dwm-status.order` is now moved to [](#opt-services.dwm-status.settings.order), as it's a part of the config file.

     

···

       
64
       
 
       


     

       
65
       
 
       
- The `yeahwm` package and `services.xserver.windowManager.yeahwm` module were removed due to the package being broken and unmaintained upstream.

     

       
66
       
 
       


     

       
67
       
+
       
- The `services.postgresql` module now sets up a systemd unit `postgresql.target`. Depending on `postgresql.target` guarantees that initial/ensure scripts were executed.

     

       
68
       
+
       


     

       
69
       
 
       
- The `services.siproxd` module has been removed as `siproxd` is unmaintained and broken with libosip 5.x.

     

       
70
       
 
       


     

       
71
       
 
       
- `services.dwm-status.extraConfig` was replaced by [RFC0042](https://github.com/NixOS/rfcs/blob/master/rfcs/0042-config-option.md)-compliant [](#opt-services.dwm-status.settings), which is used to generate the config file. `services.dwm-status.order` is now moved to [](#opt-services.dwm-status.settings.order), as it's a part of the config file.

     

···

       
182
       
 
       
      requires = [ "network.target" ];

     

       
183
       
 
       
      # we're adding this optionally so just in case there's any race it'll be caught

     

       
184
       
 
       
      # in case postgres doesn't start, pgadmin will just start normally

     

       
185
       
-
       
      wants = [ "postgresql.service" ];

     

       
186
       
 
       


     

       
187
       
 
       
      path = [

     

       
188
       
 
       
        config.services.postgresql.package

     

···

       
182
       
 
       
      requires = [ "network.target" ];

     

       
183
       
 
       
      # we're adding this optionally so just in case there's any race it'll be caught

     

       
184
       
 
       
      # in case postgres doesn't start, pgadmin will just start normally

     

       
185
       
+
       
      wants = [ "postgresql.target" ];

     

       
186
       
 
       


     

       
187
       
 
       
      path = [

     

       
188
       
 
       
        config.services.postgresql.package

     

···

       
720
       
 
       
    systemd.services.bacula-dir = mkIf dir_cfg.enable {

     

       
721
       
 
       
      after = [

     

       
722
       
 
       
        "network.target"

     

       
723
       
-
       
        "postgresql.service"

     

       
724
       
 
       
      ];

     

       
725
       
 
       
      description = "Bacula Director Daemon";

     

       
726
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
720
       
 
       
    systemd.services.bacula-dir = mkIf dir_cfg.enable {

     

       
721
       
 
       
      after = [

     

       
722
       
 
       
        "network.target"

     

       
723
       
+
       
        "postgresql.target"

     

       
724
       
 
       
      ];

     

       
725
       
 
       
      description = "Bacula Director Daemon";

     

       
726
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
35
       
 
       


     

       
36
       
 
       
      description = "Backup of ${db} database(s)";

     

       
37
       
 
       


     

       
38
       
-
       
      requires = [ "postgresql.service" ];

     

       
39
       
 
       


     

       
40
       
 
       
      path = [

     

       
41
       
 
       
        pkgs.coreutils

     

···

       
35
       
 
       


     

       
36
       
 
       
      description = "Backup of ${db} database(s)";

     

       
37
       
 
       


     

       
38
       
+
       
      requires = [ "postgresql.target" ];

     

       
39
       
 
       


     

       
40
       
 
       
      path = [

     

       
41
       
 
       
        pkgs.coreutils

     

···

       
334
       
 
       


     

       
335
       
 
       
    systemd.services.hydra-init = {

     

       
336
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
337
       
-
       
      requires = lib.optional haveLocalDB "postgresql.service";

     

       
338
       
-
       
      after = lib.optional haveLocalDB "postgresql.service";

     

       
339
       
 
       
      environment = env // {

     

       
340
       
 
       
        HYDRA_DBI = "${env.HYDRA_DBI};application_name=hydra-init";

     

       
341
       
 
       
      };

     

···

       
334
       
 
       


     

       
335
       
 
       
    systemd.services.hydra-init = {

     

       
336
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
337
       
+
       
      requires = lib.optional haveLocalDB "postgresql.target";

     

       
338
       
+
       
      after = lib.optional haveLocalDB "postgresql.target";

     

       
339
       
 
       
      environment = env // {

     

       
340
       
 
       
        HYDRA_DBI = "${env.HYDRA_DBI};application_name=hydra-init";

     

       
341
       
 
       
      };

     

···

       
185
       
 
       
  config = lib.mkIf cfg.enable {

     

       
186
       
 
       
    systemd.services.pgmanage = {

     

       
187
       
 
       
      description = "pgmanage - PostgreSQL Administration for the web";

     

       
188
       
-
       
      wants = [ "postgresql.service" ];

     

       
189
       
-
       
      after = [ "postgresql.service" ];

     

       
190
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
191
       
 
       
      serviceConfig = {

     

       
192
       
 
       
        User = pgmanage;

     

···

       
185
       
 
       
  config = lib.mkIf cfg.enable {

     

       
186
       
 
       
    systemd.services.pgmanage = {

     

       
187
       
 
       
      description = "pgmanage - PostgreSQL Administration for the web";

     

       
188
       
+
       
      wants = [ "postgresql.target" ];

     

       
189
       
+
       
      after = [ "postgresql.target" ];

     

       
190
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
191
       
 
       
      serviceConfig = {

     

       
192
       
 
       
        User = pgmanage;

     

···

       
156
       
 
       
      wants = [ "network-online.target" ];

     

       
157
       
 
       
      after = [

     

       
158
       
 
       
        "network-online.target"

     

       
159
       
-
       
        "postgresql.service"

     

       
160
       
 
       
      ];

     

       
161
       
 
       


     

       
162
       
 
       
      environment =

     

···

       
156
       
 
       
      wants = [ "network-online.target" ];

     

       
157
       
 
       
      after = [

     

       
158
       
 
       
        "network-online.target"

     

       
159
       
+
       
        "postgresql.target"

     

       
160
       
 
       
      ];

     

       
161
       
 
       


     

       
162
       
 
       
      environment =

     

···

       
89
       
 
       


     

       
90
       
 
       
**NOTE:** please make sure that any added migrations are idempotent (re-runnable).

     

       
91
       
 
       


     

       
92
       
-
       
#### as superuser {#module-services-postgres-initializing-extra-permissions-superuser}

     

       
93
       
-
       


     

       
94
       
-
       
**Advantage:** compatible with postgres < 15, because it's run

     

       
95
       
-
       
as the database superuser `postgres`.

     

       
96
       
 
       


     

       
97
       
-
       
##### in database `postStart` {#module-services-postgres-initializing-extra-permissions-superuser-post-start}

     

       
98
       
-
       


     

       
99
       
-
       
**Disadvantage:** need to take care of ordering yourself. In this

     

       
100
       
-
       
example, `mkAfter` ensures that permissions are assigned after any

     

       
101
       
-
       
databases from `ensureDatabases` and `extraUser1` from `ensureUsers`

     

       
102
       
-
       
are already created.

     

       
103
       
 
       


     

       
104
       
 
       
```nix

     

       
105
       
 
       
  {

     

       
106
       
-
       
    systemd.services.postgresql.postStart = lib.mkAfter ''

     

       
107
       
-
       
      $PSQL service1 -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
108
       
-
       
      $PSQL service1 -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
109
       
 
       
      # ....

     

       
110
       
 
       
    '';

     

       
111
       
 
       
  }

     

       
112
       
 
       
```

     

       
113
       
 
       


     

       
114
       
-
       
##### in intermediate oneshot service {#module-services-postgres-initializing-extra-permissions-superuser-oneshot}

     

       
115
       
 
       


     

       
116
       
 
       
```nix

     

       
117
       
 
       
  {

     
···

       
119
       
 
       
      serviceConfig.Type = "oneshot";

     

       
120
       
 
       
      requiredBy = "service1.service";

     

       
121
       
 
       
      before = "service1.service";

     

       
122
       
-
       
      after = "postgresql.service";

     

       
123
       
 
       
      serviceConfig.User = "postgres";

     

       
124
       
-
       
      environment.PSQL = "psql --port=${toString services.postgresql.settings.port}";

     

       
125
       
 
       
      path = [ postgresql ];

     

       
126
       
 
       
      script = ''

     

       
127
       
-
       
        $PSQL service1 -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
128
       
-
       
        $PSQL service1 -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
129
       
-
       
        # ....

     

       
130
       
-
       
      '';

     

       
131
       
-
       
    };

     

       
132
       
-
       
  }

     

       
133
       
-
       
```

     

       
134
       
-
       


     

       
135
       
-
       
#### as service user {#module-services-postgres-initializing-extra-permissions-service-user}

     

       
136
       
-
       


     

       
137
       
-
       
**Advantage:** re-uses systemd's dependency ordering;

     

       
138
       
-
       


     

       
139
       
-
       
**Disadvantage:** relies on service user having grant permission. To be combined with `ensureDBOwnership`.

     

       
140
       
-
       


     

       
141
       
-
       
##### in service `preStart` {#module-services-postgres-initializing-extra-permissions-service-user-pre-start}

     

       
142
       
-
       


     

       
143
       
-
       
```nix

     

       
144
       
-
       
  {

     

       
145
       
-
       
    environment.PSQL = "psql --port=${toString services.postgresql.settings.port}";

     

       
146
       
-
       
    path = [ postgresql ];

     

       
147
       
-
       
    systemd.services."service1".preStart = ''

     

       
148
       
-
       
      $PSQL -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
149
       
-
       
      $PSQL -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
150
       
-
       
      # ....

     

       
151
       
-
       
    '';

     

       
152
       
-
       
  }

     

       
153
       
-
       
```

     

       
154
       
-
       


     

       
155
       
-
       
##### in intermediate oneshot service {#module-services-postgres-initializing-extra-permissions-service-user-oneshot}

     

       
156
       
-
       


     

       
157
       
-
       
```nix

     

       
158
       
-
       
  {

     

       
159
       
-
       
    systemd.services."migrate-service1-db1" = {

     

       
160
       
-
       
      serviceConfig.Type = "oneshot";

     

       
161
       
-
       
      requiredBy = "service1.service";

     

       
162
       
-
       
      before = "service1.service";

     

       
163
       
-
       
      after = "postgresql.service";

     

       
164
       
-
       
      serviceConfig.User = "service1";

     

       
165
       
-
       
      environment.PSQL = "psql --port=${toString services.postgresql.settings.port}";

     

       
166
       
-
       
      path = [ postgresql ];

     

       
167
       
-
       
      script = ''

     

       
168
       
-
       
        $PSQL -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
169
       
-
       
        $PSQL -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
170
       
 
       
        # ....

     

       
171
       
 
       
      '';

     

       
172
       
 
       
    };

     

···

       
89
       
 
       


     

       
90
       
 
       
**NOTE:** please make sure that any added migrations are idempotent (re-runnable).

     

       
91
       
 
       


     

       
92
       
+
       
#### in database's setup `postStart` {#module-services-postgres-initializing-extra-permissions-superuser-post-start}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
93
       
 
       


     

       
94
       
+
       
`ensureUsers` is run in `postgresql-setup`, so this is where `postStart` must be added to:

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
95
       
 
       


     

       
96
       
 
       
```nix

     

       
97
       
 
       
  {

     

       
98
       
+
       
    systemd.services.postgresql-setup.postStart = ''

     

       
99
       
+
       
      psql service1 -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
100
       
+
       
      psql service1 -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
101
       
 
       
      # ....

     

       
102
       
 
       
    '';

     

       
103
       
 
       
  }

     

       
104
       
 
       
```

     

       
105
       
 
       


     

       
106
       
+
       
#### in intermediate oneshot service {#module-services-postgres-initializing-extra-permissions-superuser-oneshot}

     

       
107
       
 
       


     

       
108
       
 
       
```nix

     

       
109
       
 
       
  {

     
···

       
111
       
 
       
      serviceConfig.Type = "oneshot";

     

       
112
       
 
       
      requiredBy = "service1.service";

     

       
113
       
 
       
      before = "service1.service";

     

       
114
       
+
       
      after = "postgresql.target";

     

       
115
       
 
       
      serviceConfig.User = "postgres";

     

       
116
       
+
       
      environment.PGPORT = toString services.postgresql.settings.port;

     

       
117
       
 
       
      path = [ postgresql ];

     

       
118
       
 
       
      script = ''

     

       
119
       
+
       
        psql service1 -c 'GRANT SELECT ON ALL TABLES IN SCHEMA public TO "extraUser1"'

     

       
120
       
+
       
        psql service1 -c 'GRANT SELECT ON ALL SEQUENCES IN SCHEMA public TO "extraUser1"'

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
121
       
 
       
        # ....

     

       
122
       
 
       
      '';

     

       
123
       
 
       
    };

     

···

       
751
       
 
       
      cfg.checkConfig && pkgs.stdenv.hostPlatform == pkgs.stdenv.buildPlatform

     

       
752
       
 
       
    ) configFileCheck;

     

       
753
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
754
       
 
       
    systemd.services.postgresql = {

     

       
755
       
 
       
      description = "PostgreSQL Server";

     

       
756
       
 
       


     

       
757
       
-
       
      wantedBy = [ "multi-user.target" ];

     

       
758
       
 
       
      after = [ "network.target" ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
759
       
 
       


     

       
760
       
 
       
      environment.PGDATA = cfg.dataDir;

     

       
761
       
 
       


     
···

       
775
       
 
       


     

       
776
       
 
       
        ln -sfn "${configFile}/postgresql.conf" "${cfg.dataDir}/postgresql.conf"

     

       
777
       
 
       
      '';

     

       
778
       
-
       


     

       
779
       
-
       
      # Wait for PostgreSQL to be ready to accept connections.

     

       
780
       
-
       
      postStart =

     

       
781
       
-
       
        ''

     

       
782
       
-
       
          PSQL="psql --port=${builtins.toString cfg.settings.port}"

     

       
783
       
-
       


     

       
784
       
-
       
          while ! $PSQL -d postgres -c "" 2> /dev/null; do

     

       
785
       
-
       
              if ! kill -0 "$MAINPID"; then exit 1; fi

     

       
786
       
-
       
              sleep 0.1

     

       
787
       
-
       
          done

     

       
788
       
-
       


     

       
789
       
-
       
          if test -e "${cfg.dataDir}/.first_startup"; then

     

       
790
       
-
       
            ${optionalString (cfg.initialScript != null) ''

     

       
791
       
-
       
              $PSQL -f "${cfg.initialScript}" -d postgres

     

       
792
       
-
       
            ''}

     

       
793
       
-
       
            rm -f "${cfg.dataDir}/.first_startup"

     

       
794
       
-
       
          fi

     

       
795
       
-
       
        ''

     

       
796
       
-
       
        + optionalString (cfg.ensureDatabases != [ ]) ''

     

       
797
       
-
       
          ${concatMapStrings (database: ''

     

       
798
       
-
       
            $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '${database}'" | grep -q 1 || $PSQL -tAc 'CREATE DATABASE "${database}"'

     

       
799
       
-
       
          '') cfg.ensureDatabases}

     

       
800
       
-
       
        ''

     

       
801
       
-
       
        + ''

     

       
802
       
-
       
          ${concatMapStrings (

     

       
803
       
-
       
            user:

     

       
804
       
-
       
            let

     

       
805
       
-
       
              dbOwnershipStmt = optionalString user.ensureDBOwnership ''$PSQL -tAc 'ALTER DATABASE "${user.name}" OWNER TO "${user.name}";' '';

     

       
806
       
-
       


     

       
807
       
-
       
              filteredClauses = filterAttrs (name: value: value != null) user.ensureClauses;

     

       
808
       
-
       


     

       
809
       
-
       
              clauseSqlStatements = attrValues (mapAttrs (n: v: if v then n else "no${n}") filteredClauses);

     

       
810
       
-
       


     

       
811
       
-
       
              userClauses = ''$PSQL -tAc 'ALTER ROLE "${user.name}" ${concatStringsSep " " clauseSqlStatements}' '';

     

       
812
       
-
       
            in

     

       
813
       
-
       
            ''

     

       
814
       
-
       
              $PSQL -tAc "SELECT 1 FROM pg_roles WHERE rolname='${user.name}'" | grep -q 1 || $PSQL -tAc 'CREATE USER "${user.name}"'

     

       
815
       
-
       
              ${userClauses}

     

       
816
       
-
       


     

       
817
       
-
       
              ${dbOwnershipStmt}

     

       
818
       
-
       
            ''

     

       
819
       
-
       
          ) cfg.ensureUsers}

     

       
820
       
-
       
        '';

     

       
821
       
 
       


     

       
822
       
 
       
      serviceConfig = mkMerge [

     

       
823
       
 
       
        {

     
···

       
890
       
 
       
      ];

     

       
891
       
 
       


     

       
892
       
 
       
      unitConfig.RequiresMountsFor = "${cfg.dataDir}";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
893
       
 
       
    };

     

       
894
       
 
       
  };

     

       
895
       
 
       


     

···

       
751
       
 
       
      cfg.checkConfig && pkgs.stdenv.hostPlatform == pkgs.stdenv.buildPlatform

     

       
752
       
 
       
    ) configFileCheck;

     

       
753
       
 
       


     

       
754
       
+
       
    systemd.targets.postgresql = {

     

       
755
       
+
       
      description = "PostgreSQL";

     

       
756
       
+
       
      wantedBy = [ "multi-user.target" ];

     

       
757
       
+
       
      bindsTo = [

     

       
758
       
+
       
        "postgresql.service"

     

       
759
       
+
       
        "postgresql-setup.service"

     

       
760
       
+
       
      ];

     

       
761
       
+
       
    };

     

       
762
       
+
       


     

       
763
       
 
       
    systemd.services.postgresql = {

     

       
764
       
 
       
      description = "PostgreSQL Server";

     

       
765
       
 
       


     

       
0
       
 
       

     

       
766
       
 
       
      after = [ "network.target" ];

     

       
767
       
+
       


     

       
768
       
+
       
      # To trigger the .target also on "systemctl start postgresql".

     

       
769
       
+
       
      bindsTo = [ "postgresql.target" ];

     

       
770
       
 
       


     

       
771
       
 
       
      environment.PGDATA = cfg.dataDir;

     

       
772
       
 
       


     
···

       
786
       
 
       


     

       
787
       
 
       
        ln -sfn "${configFile}/postgresql.conf" "${cfg.dataDir}/postgresql.conf"

     

       
788
       
 
       
      '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
789
       
 
       


     

       
790
       
 
       
      serviceConfig = mkMerge [

     

       
791
       
 
       
        {

     
···

       
858
       
 
       
      ];

     

       
859
       
 
       


     

       
860
       
 
       
      unitConfig.RequiresMountsFor = "${cfg.dataDir}";

     

       
861
       
+
       
    };

     

       
862
       
+
       


     

       
863
       
+
       
    systemd.services.postgresql-setup = {

     

       
864
       
+
       
      description = "PostgreSQL Setup Scripts";

     

       
865
       
+
       


     

       
866
       
+
       
      requires = [ "postgresql.service" ];

     

       
867
       
+
       
      after = [ "postgresql.service" ];

     

       
868
       
+
       


     

       
869
       
+
       
      serviceConfig = {

     

       
870
       
+
       
        User = "postgres";

     

       
871
       
+
       
        Group = "postgres";

     

       
872
       
+
       
        Type = "oneshot";

     

       
873
       
+
       
        RemainAfterExit = true;

     

       
874
       
+
       
      };

     

       
875
       
+
       


     

       
876
       
+
       
      path = [ cfg.finalPackage ];

     

       
877
       
+
       
      environment.PGPORT = builtins.toString cfg.settings.port;

     

       
878
       
+
       


     

       
879
       
+
       
      # Wait for PostgreSQL to be ready to accept connections.

     

       
880
       
+
       
      script =

     

       
881
       
+
       
        ''

     

       
882
       
+
       
          while ! psql -d postgres -c "" 2> /dev/null; do

     

       
883
       
+
       
              if ! systemctl is-active --quiet postgresql.service; then exit 1; fi

     

       
884
       
+
       
              sleep 0.1

     

       
885
       
+
       
          done

     

       
886
       
+
       


     

       
887
       
+
       
          if test -e "${cfg.dataDir}/.first_startup"; then

     

       
888
       
+
       
            ${optionalString (cfg.initialScript != null) ''

     

       
889
       
+
       
              psql -f "${cfg.initialScript}" -d postgres

     

       
890
       
+
       
            ''}

     

       
891
       
+
       
            rm -f "${cfg.dataDir}/.first_startup"

     

       
892
       
+
       
          fi

     

       
893
       
+
       
        ''

     

       
894
       
+
       
        + optionalString (cfg.ensureDatabases != [ ]) ''

     

       
895
       
+
       
          ${concatMapStrings (database: ''

     

       
896
       
+
       
            psql -tAc "SELECT 1 FROM pg_database WHERE datname = '${database}'" | grep -q 1 || psql -tAc 'CREATE DATABASE "${database}"'

     

       
897
       
+
       
          '') cfg.ensureDatabases}

     

       
898
       
+
       
        ''

     

       
899
       
+
       
        + ''

     

       
900
       
+
       
          ${concatMapStrings (

     

       
901
       
+
       
            user:

     

       
902
       
+
       
            let

     

       
903
       
+
       
              dbOwnershipStmt = optionalString user.ensureDBOwnership ''psql -tAc 'ALTER DATABASE "${user.name}" OWNER TO "${user.name}";' '';

     

       
904
       
+
       


     

       
905
       
+
       
              filteredClauses = filterAttrs (name: value: value != null) user.ensureClauses;

     

       
906
       
+
       


     

       
907
       
+
       
              clauseSqlStatements = attrValues (mapAttrs (n: v: if v then n else "no${n}") filteredClauses);

     

       
908
       
+
       


     

       
909
       
+
       
              userClauses = ''psql -tAc 'ALTER ROLE "${user.name}" ${concatStringsSep " " clauseSqlStatements}' '';

     

       
910
       
+
       
            in

     

       
911
       
+
       
            ''

     

       
912
       
+
       
              psql -tAc "SELECT 1 FROM pg_roles WHERE rolname='${user.name}'" | grep -q 1 || psql -tAc 'CREATE USER "${user.name}"'

     

       
913
       
+
       
              ${userClauses}

     

       
914
       
+
       


     

       
915
       
+
       
              ${dbOwnershipStmt}

     

       
916
       
+
       
            ''

     

       
917
       
+
       
          ) cfg.ensureUsers}

     

       
918
       
+
       
        '';

     

       
919
       
 
       
    };

     

       
920
       
 
       
  };

     

       
921
       
 
       


     

···

       
256
       
 
       
      wants = [ "network-online.target" ];

     

       
257
       
 
       
      after = [

     

       
258
       
 
       
        "network-online.target"

     

       
259
       
-
       
        "postgresql.service"

     

       
260
       
 
       
      ];

     

       
261
       
 
       


     

       
262
       
 
       
      serviceConfig = {

     

···

       
256
       
 
       
      wants = [ "network-online.target" ];

     

       
257
       
 
       
      after = [

     

       
258
       
 
       
        "network-online.target"

     

       
259
       
+
       
        "postgresql.target"

     

       
260
       
 
       
      ];

     

       
261
       
 
       


     

       
262
       
 
       
      serviceConfig = {

     

···

       
275
       
 
       
          "systemd-tmpfiles-setup.service"

     

       
276
       
 
       
        ]

     

       
277
       
 
       
        ++ lib.optionals (cfg.database.createLocally) [

     

       
278
       
-
       
          "postgresql.service"

     

       
279
       
 
       
        ]

     

       
280
       
 
       
        ++ lib.optionals cfg.redis.createLocally [

     

       
281
       
 
       
          "redis-${cfg.redis.name}.service"

     

       
282
       
 
       
        ];

     

       
283
       
 
       
      requires = lib.optionals (cfg.database.createLocally) [

     

       
284
       
-
       
        "postgresql.service"

     

       
285
       
 
       
      ];

     

       
286
       
 
       
      description = "Zammad web";

     

       
287
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
275
       
 
       
          "systemd-tmpfiles-setup.service"

     

       
276
       
 
       
        ]

     

       
277
       
 
       
        ++ lib.optionals (cfg.database.createLocally) [

     

       
278
       
+
       
          "postgresql.target"

     

       
279
       
 
       
        ]

     

       
280
       
 
       
        ++ lib.optionals cfg.redis.createLocally [

     

       
281
       
 
       
          "redis-${cfg.redis.name}.service"

     

       
282
       
 
       
        ];

     

       
283
       
 
       
      requires = lib.optionals (cfg.database.createLocally) [

     

       
284
       
+
       
        "postgresql.target"

     

       
285
       
 
       
      ];

     

       
286
       
 
       
      description = "Zammad web";

     

       
287
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
123
       
 
       
                  echo "Bank initialisation complete"

     

       
124
       
 
       
                fi

     

       
125
       
 
       
              '';

     

       
126
       
-
       
            requires = lib.optionals cfg.createLocalDatabase [ "postgresql.service" ];

     

       
127
       
-
       
            after = [ "network.target" ] ++ lib.optionals cfg.createLocalDatabase [ "postgresql.service" ];

     

       
128
       
 
       
          };

     

       
129
       
 
       
      };

     

       
130
       
 
       


     

···

       
123
       
 
       
                  echo "Bank initialisation complete"

     

       
124
       
 
       
                fi

     

       
125
       
 
       
              '';

     

       
126
       
+
       
            requires = lib.optionals cfg.createLocalDatabase [ "postgresql.target" ];

     

       
127
       
+
       
            after = [ "network.target" ] ++ lib.optionals cfg.createLocalDatabase [ "postgresql.target" ];

     

       
128
       
 
       
          };

     

       
129
       
 
       
      };

     

       
130
       
 
       


     

···

       
119
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
120
       
 
       
        after = [

     

       
121
       
 
       
          "network.target"

     

       
122
       
-
       
          "postgresql.service"

     

       
123
       
 
       
        ];

     

       
124
       
 
       


     

       
125
       
 
       
        # pg_dump

     

       
126
       
 
       
        path = [ config.services.postgresql.package ];

     

       
127
       
 
       


     

       
128
       
-
       
        requires = [ "postgresql.service" ];

     

       
129
       
 
       


     

       
130
       
 
       
        serviceConfig = {

     

       
131
       
 
       
          ExecStart = "${cfg.package}/bin/odoo";

     

···

       
119
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
120
       
 
       
        after = [

     

       
121
       
 
       
          "network.target"

     

       
122
       
+
       
          "postgresql.target"

     

       
123
       
 
       
        ];

     

       
124
       
 
       


     

       
125
       
 
       
        # pg_dump

     

       
126
       
 
       
        path = [ config.services.postgresql.package ];

     

       
127
       
 
       


     

       
128
       
+
       
        requires = [ "postgresql.target" ];

     

       
129
       
 
       


     

       
130
       
 
       
        serviceConfig = {

     

       
131
       
 
       
          ExecStart = "${cfg.package}/bin/odoo";

     

···

       
89
       
 
       
            Restart = "on-failure";

     

       
90
       
 
       
            RestartSec = "5s";

     

       
91
       
 
       
          };

     

       
92
       
-
       
          requires = [ "postgresql.service" ];

     

       
93
       
-
       
          after = [ "postgresql.service" ];

     

       
94
       
 
       
        };

     

       
95
       
 
       
      }

     

       
96
       
 
       
    ];

     

···

       
89
       
 
       
            Restart = "on-failure";

     

       
90
       
 
       
            RestartSec = "5s";

     

       
91
       
 
       
          };

     

       
92
       
+
       
          requires = [ "postgresql.target" ];

     

       
93
       
+
       
          after = [ "postgresql.target" ];

     

       
94
       
 
       
        };

     

       
95
       
 
       
      }

     

       
96
       
 
       
    ];

     

···

       
623
       
 
       


     

       
624
       
 
       
        # prevent races with database creation

     

       
625
       
 
       
        "mysql.service"

     

       
626
       
-
       
        "postgresql.service"

     

       
627
       
 
       
      ];

     

       
628
       
 
       
      reloadTriggers =

     

       
629
       
 
       
        optionals (cfg.config != null) [ configFile ]

     

···

       
623
       
 
       


     

       
624
       
 
       
        # prevent races with database creation

     

       
625
       
 
       
        "mysql.service"

     

       
626
       
+
       
        "postgresql.target"

     

       
627
       
 
       
      ];

     

       
628
       
 
       
      reloadTriggers =

     

       
629
       
 
       
        optionals (cfg.config != null) [ configFile ]

     

···

       
107
       
 
       
        systemd.services.dspam = {

     

       
108
       
 
       
          description = "dspam spam filtering daemon";

     

       
109
       
 
       
          wantedBy = [ "multi-user.target" ];

     

       
110
       
-
       
          after = [ "postgresql.service" ];

     

       
111
       
 
       
          restartTriggers = [ cfgfile ];

     

       
112
       
 
       


     

       
113
       
 
       
          serviceConfig = {

     

···

       
107
       
 
       
        systemd.services.dspam = {

     

       
108
       
 
       
          description = "dspam spam filtering daemon";

     

       
109
       
 
       
          wantedBy = [ "multi-user.target" ];

     

       
110
       
+
       
          after = [ "postgresql.target" ];

     

       
111
       
 
       
          restartTriggers = [ cfgfile ];

     

       
112
       
 
       


     

       
113
       
 
       
          serviceConfig = {

     

···

       
193
       
 
       


     

       
194
       
 
       
    systemd.services.listmonk = {

     

       
195
       
 
       
      description = "Listmonk - newsletter and mailing list manager";

     

       
196
       
-
       
      after = [ "network.target" ] ++ lib.optional cfg.database.createLocally "postgresql.service";

     

       
197
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
198
       
 
       
      serviceConfig = {

     

       
199
       
 
       
        Type = "exec";

     

···

       
193
       
 
       


     

       
194
       
 
       
    systemd.services.listmonk = {

     

       
195
       
 
       
      description = "Listmonk - newsletter and mailing list manager";

     

       
196
       
+
       
      after = [ "network.target" ] ++ lib.optional cfg.database.createLocally "postgresql.target";

     

       
197
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
198
       
 
       
      serviceConfig = {

     

       
199
       
 
       
        Type = "exec";

     

···

       
575
       
 
       
          after =

     

       
576
       
 
       
            [ "network.target" ]

     

       
577
       
 
       
            ++ lib.optional cfg.enablePostfix "postfix-setup.service"

     

       
578
       
-
       
            ++ lib.optional withPostgresql "postgresql.service";

     

       
579
       
 
       
          restartTriggers = [ mailmanCfgFile ];

     

       
580
       
-
       
          requires = lib.optional withPostgresql "postgresql.service";

     

       
581
       
 
       
          wantedBy = [ "multi-user.target" ];

     

       
582
       
 
       
          serviceConfig = {

     

       
583
       
 
       
            ExecStart = "${mailmanEnv}/bin/mailman start";

     
···

       
609
       
 
       
            "hyperkitty.service"

     

       
610
       
 
       
          ];

     

       
611
       
 
       
          path = with pkgs; [ jq ];

     

       
612
       
-
       
          after = lib.optional withPostgresql "postgresql.service";

     

       
613
       
-
       
          requires = lib.optional withPostgresql "postgresql.service";

     

       
614
       
 
       
          serviceConfig.RemainAfterExit = true;

     

       
615
       
 
       
          serviceConfig.Type = "oneshot";

     

       
616
       
 
       
          script = ''

     
···

       
709
       
 
       
          in

     

       
710
       
 
       
          {

     

       
711
       
 
       
            wantedBy = [ "multi-user.target" ];

     

       
712
       
-
       
            after = lib.optional withPostgresql "postgresql.service";

     

       
713
       
 
       
            requires = [

     

       
714
       
 
       
              "mailman-uwsgi.socket"

     

       
715
       
 
       
              "mailman-web-setup.service"

     

       
716
       
-
       
            ] ++ lib.optional withPostgresql "postgresql.service";

     

       
717
       
 
       
            restartTriggers = [ config.environment.etc."mailman3/settings.py".source ];

     

       
718
       
 
       
            serviceConfig = {

     

       
719
       
 
       
              # Since the mailman-web settings.py obstinately creates a logs

     

···

       
575
       
 
       
          after =

     

       
576
       
 
       
            [ "network.target" ]

     

       
577
       
 
       
            ++ lib.optional cfg.enablePostfix "postfix-setup.service"

     

       
578
       
+
       
            ++ lib.optional withPostgresql "postgresql.target";

     

       
579
       
 
       
          restartTriggers = [ mailmanCfgFile ];

     

       
580
       
+
       
          requires = lib.optional withPostgresql "postgresql.target";

     

       
581
       
 
       
          wantedBy = [ "multi-user.target" ];

     

       
582
       
 
       
          serviceConfig = {

     

       
583
       
 
       
            ExecStart = "${mailmanEnv}/bin/mailman start";

     
···

       
609
       
 
       
            "hyperkitty.service"

     

       
610
       
 
       
          ];

     

       
611
       
 
       
          path = with pkgs; [ jq ];

     

       
612
       
+
       
          after = lib.optional withPostgresql "postgresql.target";

     

       
613
       
+
       
          requires = lib.optional withPostgresql "postgresql.target";

     

       
614
       
 
       
          serviceConfig.RemainAfterExit = true;

     

       
615
       
 
       
          serviceConfig.Type = "oneshot";

     

       
616
       
 
       
          script = ''

     
···

       
709
       
 
       
          in

     

       
710
       
 
       
          {

     

       
711
       
 
       
            wantedBy = [ "multi-user.target" ];

     

       
712
       
+
       
            after = lib.optional withPostgresql "postgresql.target";

     

       
713
       
 
       
            requires = [

     

       
714
       
 
       
              "mailman-uwsgi.socket"

     

       
715
       
 
       
              "mailman-web-setup.service"

     

       
716
       
+
       
            ] ++ lib.optional withPostgresql "postgresql.target";

     

       
717
       
 
       
            restartTriggers = [ config.environment.etc."mailman3/settings.py".source ];

     

       
718
       
 
       
            serviceConfig = {

     

       
719
       
 
       
              # Since the mailman-web settings.py obstinately creates a logs

     

···

       
148
       
 
       
    # objects owners and extensions; for now we tack on what's needed

     

       
149
       
 
       
    # here.

     

       
150
       
 
       
    systemd.services.postfixadmin-postgres = lib.mkIf localDB {

     

       
151
       
-
       
      after = [ "postgresql.service" ];

     

       
152
       
-
       
      bindsTo = [ "postgresql.service" ];

     

       
153
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
154
       
 
       
      path = [

     

       
155
       
 
       
        pgsql.package

     

···

       
148
       
 
       
    # objects owners and extensions; for now we tack on what's needed

     

       
149
       
 
       
    # here.

     

       
150
       
 
       
    systemd.services.postfixadmin-postgres = lib.mkIf localDB {

     

       
151
       
+
       
      after = [ "postgresql.target" ];

     

       
152
       
+
       
      bindsTo = [ "postgresql.target" ];

     

       
153
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
154
       
 
       
      path = [

     

       
155
       
 
       
        pgsql.package

     

···

       
273
       
 
       


     

       
274
       
 
       
    systemd.services.roundcube-setup = lib.mkMerge [

     

       
275
       
 
       
      (lib.mkIf localDB {

     

       
276
       
-
       
        requires = [ "postgresql.service" ];

     

       
277
       
-
       
        after = [ "postgresql.service" ];

     

       
278
       
 
       
      })

     

       
279
       
 
       
      {

     

       
280
       
 
       
        wants = [ "network-online.target" ];

     

···

       
273
       
 
       


     

       
274
       
 
       
    systemd.services.roundcube-setup = lib.mkMerge [

     

       
275
       
 
       
      (lib.mkIf localDB {

     

       
276
       
+
       
        requires = [ "postgresql.target" ];

     

       
277
       
+
       
        after = [ "postgresql.target" ];

     

       
278
       
 
       
      })

     

       
279
       
 
       
      {

     

       
280
       
 
       
        wants = [ "network-online.target" ];

     

···

       
196
       
 
       
      description = "Matrix-IRC bridge";

     

       
197
       
 
       
      before = [ "matrix-synapse.service" ]; # So the registration can be used by Synapse

     

       
198
       
 
       
      after = lib.optionals (cfg.settings.database.engine == "postgres") [

     

       
199
       
-
       
        "postgresql.service"

     

       
200
       
 
       
      ];

     

       
201
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
202
       
 
       


     

···

       
196
       
 
       
      description = "Matrix-IRC bridge";

     

       
197
       
 
       
      before = [ "matrix-synapse.service" ]; # So the registration can be used by Synapse

     

       
198
       
 
       
      after = lib.optionals (cfg.settings.database.engine == "postgres") [

     

       
199
       
+
       
        "postgresql.target"

     

       
200
       
 
       
      ];

     

       
201
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
202
       
 
       


     

···

       
440
       
 
       


     

       
441
       
 
       
    systemd.services.maubot = rec {

     

       
442
       
 
       
      description = "maubot - a plugin-based Matrix bot system written in Python";

     

       
443
       
-
       
      after = [ "network.target" ] ++ wants ++ lib.optional hasLocalPostgresDB "postgresql.service";

     

       
444
       
 
       
      # all plugins get automatically disabled if maubot starts before synapse

     

       
445
       
 
       
      wants = lib.optional config.services.matrix-synapse.enable config.services.matrix-synapse.serviceUnit;

     

       
446
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
440
       
 
       


     

       
441
       
 
       
    systemd.services.maubot = rec {

     

       
442
       
 
       
      description = "maubot - a plugin-based Matrix bot system written in Python";

     

       
443
       
+
       
      after = [ "network.target" ] ++ wants ++ lib.optional hasLocalPostgresDB "postgresql.target";

     

       
444
       
 
       
      # all plugins get automatically disabled if maubot starts before synapse

     

       
445
       
 
       
      wants = lib.optional config.services.matrix-synapse.enable config.services.matrix-synapse.serviceUnit;

     

       
446
       
 
       
      wantedBy = [ "multi-user.target" ];

     

···

       
119
       
 
       
    systemd.services.synapse-auto-compressor = {

     

       
120
       
 
       
      description = "synapse-auto-compressor";

     

       
121
       
 
       
      requires = lib.optionals synapseUsesLocalPostgresql [

     

       
122
       
-
       
        "postgresql.service"

     

       
123
       
 
       
      ];

     

       
124
       
 
       
      inherit (cfg) startAt;

     

       
125
       
 
       
      serviceConfig = {

     

···

       
119
       
 
       
    systemd.services.synapse-auto-compressor = {

     

       
120
       
 
       
      description = "synapse-auto-compressor";

     

       
121
       
 
       
      requires = lib.optionals synapseUsesLocalPostgresql [

     

       
122
       
+
       
        "postgresql.target"

     

       
123
       
 
       
      ];

     

       
124
       
 
       
      inherit (cfg) startAt;

     

       
125
       
 
       
      serviceConfig = {

     

···

       
1439
       
 
       
    systemd.targets.matrix-synapse = lib.mkIf hasWorkers {

     

       
1440
       
 
       
      description = "Synapse Matrix parent target";

     

       
1441
       
 
       
      wants = [ "network-online.target" ];

     

       
1442
       
-
       
      after = [ "network-online.target" ] ++ optional hasLocalPostgresDB "postgresql.service";

     

       
1443
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
1444
       
 
       
    };

     

       
1445
       
 
       


     
···

       
1451
       
 
       
              partOf = [ "matrix-synapse.target" ];

     

       
1452
       
 
       
              wantedBy = [ "matrix-synapse.target" ];

     

       
1453
       
 
       
              unitConfig.ReloadPropagatedFrom = "matrix-synapse.target";

     

       
1454
       
-
       
              requires = optional hasLocalPostgresDB "postgresql.service";

     

       
1455
       
 
       
            }

     

       
1456
       
 
       
          else

     

       
1457
       
 
       
            {

     

       
1458
       
 
       
              wants = [ "network-online.target" ];

     

       
1459
       
-
       
              after = [ "network-online.target" ] ++ optional hasLocalPostgresDB "postgresql.service";

     

       
1460
       
-
       
              requires = optional hasLocalPostgresDB "postgresql.service";

     

       
1461
       
 
       
              wantedBy = [ "multi-user.target" ];

     

       
1462
       
 
       
            };

     

       
1463
       
 
       
        baseServiceConfig = {

     

···

       
1439
       
 
       
    systemd.targets.matrix-synapse = lib.mkIf hasWorkers {

     

       
1440
       
 
       
      description = "Synapse Matrix parent target";

     

       
1441
       
 
       
      wants = [ "network-online.target" ];

     

       
1442
       
+
       
      after = [ "network-online.target" ] ++ optional hasLocalPostgresDB "postgresql.target";

     

       
1443
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
1444
       
 
       
    };

     

       
1445
       
 
       


     
···

       
1451
       
 
       
              partOf = [ "matrix-synapse.target" ];

     

       
1452
       
 
       
              wantedBy = [ "matrix-synapse.target" ];

     

       
1453
       
 
       
              unitConfig.ReloadPropagatedFrom = "matrix-synapse.target";

     

       
1454
       
+
       
              requires = optional hasLocalPostgresDB "postgresql.target";

     

       
1455
       
 
       
            }

     

       
1456
       
 
       
          else

     

       
1457
       
 
       
            {

     

       
1458
       
 
       
              wants = [ "network-online.target" ];

     

       
1459
       
+
       
              after = [ "network-online.target" ] ++ optional hasLocalPostgresDB "postgresql.target";

     

       
1460
       
+
       
              requires = optional hasLocalPostgresDB "postgresql.target";

     

       
1461
       
 
       
              wantedBy = [ "multi-user.target" ];

     

       
1462
       
 
       
            };

     

       
1463
       
 
       
        baseServiceConfig = {

     

···

       
92
       
 
       


     

       
93
       
 
       
    systemd.services.atuin = {

     

       
94
       
 
       
      description = "atuin server";

     

       
95
       
-
       
      requires = lib.optionals cfg.database.createLocally [ "postgresql.service" ];

     

       
96
       
 
       
      after = [

     

       
97
       
 
       
        "network-online.target"

     

       
98
       
-
       
      ] ++ lib.optionals cfg.database.createLocally [ "postgresql.service" ];

     

       
99
       
 
       
      wants = [

     

       
100
       
 
       
        "network-online.target"

     

       
101
       
-
       
      ] ++ lib.optionals cfg.database.createLocally [ "postgresql.service" ];

     

       
102
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
103
       
 
       


     

       
104
       
 
       
      serviceConfig = {

     

···

       
92
       
 
       


     

       
93
       
 
       
    systemd.services.atuin = {

     

       
94
       
 
       
      description = "atuin server";

     

       
95
       
+
       
      requires = lib.optionals cfg.database.createLocally [ "postgresql.target" ];

     

       
96
       
 
       
      after = [

     

       
97
       
 
       
        "network-online.target"

     

       
98
       
+
       
      ] ++ lib.optionals cfg.database.createLocally [ "postgresql.target" ];

     

       
99
       
 
       
      wants = [

     

       
100
       
 
       
        "network-online.target"

     

       
101
       
+
       
      ] ++ lib.optionals cfg.database.createLocally [ "postgresql.target" ];

     

       
102
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
103
       
 
       


     

       
104
       
 
       
      serviceConfig = {

     

···

       
77
       
 
       
          [ "dbus.service" ]

     

       
78
       
 
       
          ++ lib.optional config.services.httpd.enable "httpd.service"

     

       
79
       
 
       
          ++ lib.optional config.services.mysql.enable "mysql.service"

     

       
80
       
-
       
          ++ lib.optional config.services.postgresql.enable "postgresql.service"

     

       
81
       
 
       
          ++ lib.optional config.services.tomcat.enable "tomcat.service"

     

       
82
       
 
       
          ++ lib.optional config.services.svnserve.enable "svnserve.service"

     

       
83
       
 
       
          ++ lib.optional config.services.mongodb.enable "mongodb.service"

     

···

       
77
       
 
       
          [ "dbus.service" ]

     

       
78
       
 
       
          ++ lib.optional config.services.httpd.enable "httpd.service"

     

       
79
       
 
       
          ++ lib.optional config.services.mysql.enable "mysql.service"

     

       
80
       
+
       
          ++ lib.optional config.services.postgresql.enable "postgresql.target"

     

       
81
       
 
       
          ++ lib.optional config.services.tomcat.enable "tomcat.service"

     

       
82
       
 
       
          ++ lib.optional config.services.svnserve.enable "svnserve.service"

     

       
83
       
 
       
          ++ lib.optional config.services.mongodb.enable "mongodb.service"

     

···

       
663
       
 
       
          "network.target"

     

       
664
       
 
       
        ]

     

       
665
       
 
       
        ++ optionals usePostgresql [

     

       
666
       
-
       
          "postgresql.service"

     

       
667
       
 
       
        ]

     

       
668
       
 
       
        ++ optionals useMysql [

     

       
669
       
 
       
          "mysql.service"

     
···

       
673
       
 
       
        ];

     

       
674
       
 
       
      requires =

     

       
675
       
 
       
        optionals (cfg.database.createDatabase && usePostgresql) [

     

       
676
       
-
       
          "postgresql.service"

     

       
677
       
 
       
        ]

     

       
678
       
 
       
        ++ optionals (cfg.database.createDatabase && useMysql) [

     

       
679
       
 
       
          "mysql.service"

     

···

       
663
       
 
       
          "network.target"

     

       
664
       
 
       
        ]

     

       
665
       
 
       
        ++ optionals usePostgresql [

     

       
666
       
+
       
          "postgresql.target"

     

       
667
       
 
       
        ]

     

       
668
       
 
       
        ++ optionals useMysql [

     

       
669
       
 
       
          "mysql.service"

     
···

       
673
       
 
       
        ];

     

       
674
       
 
       
      requires =

     

       
675
       
 
       
        optionals (cfg.database.createDatabase && usePostgresql) [

     

       
676
       
+
       
          "postgresql.target"

     

       
677
       
 
       
        ]

     

       
678
       
 
       
        ++ optionals (cfg.database.createDatabase && useMysql) [

     

       
679
       
 
       
          "mysql.service"

     

···

       
238
       
 
       


     

       
239
       
 
       
      wants =

     

       
240
       
 
       
        with cfg.backend;

     

       
241
       
-
       
        [ ] ++ lib.optionals (service == "sql" && sql.driver == "native_pgsql") [ "postgresql.service" ];

     

       
242
       
 
       


     

       
243
       
 
       
      preStart =

     

       
244
       
 
       
        with cfg.backend;

     

···

       
238
       
 
       


     

       
239
       
 
       
      wants =

     

       
240
       
 
       
        with cfg.backend;

     

       
241
       
+
       
        [ ] ++ lib.optionals (service == "sql" && sql.driver == "native_pgsql") [ "postgresql.target" ];

     

       
242
       
 
       


     

       
243
       
 
       
      preStart =

     

       
244
       
 
       
        with cfg.backend;

     

···

       
758
       
 
       
      description = "gitea";

     

       
759
       
 
       
      after =

     

       
760
       
 
       
        [ "network.target" ]

     

       
761
       
-
       
        ++ optional usePostgresql "postgresql.service"

     

       
762
       
 
       
        ++ optional useMysql "mysql.service";

     

       
763
       
 
       
      requires =

     

       
764
       
-
       
        optional (cfg.database.createDatabase && usePostgresql) "postgresql.service"

     

       
765
       
 
       
        ++ optional (cfg.database.createDatabase && useMysql) "mysql.service";

     

       
766
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
767
       
 
       
      path = [

     

···

       
758
       
 
       
      description = "gitea";

     

       
759
       
 
       
      after =

     

       
760
       
 
       
        [ "network.target" ]

     

       
761
       
+
       
        ++ optional usePostgresql "postgresql.target"

     

       
762
       
 
       
        ++ optional useMysql "mysql.service";

     

       
763
       
 
       
      requires =

     

       
764
       
+
       
        optional (cfg.database.createDatabase && usePostgresql) "postgresql.target"

     

       
765
       
 
       
        ++ optional (cfg.database.createDatabase && useMysql) "mysql.service";

     

       
766
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
767
       
 
       
      path = [

     

···

       
1295
       
 
       
        pgsql = config.services.postgresql;

     

       
1296
       
 
       
      in

     

       
1297
       
 
       
      mkIf databaseActuallyCreateLocally {

     

       
1298
       
-
       
        after = [ "postgresql.service" ];

     

       
1299
       
-
       
        bindsTo = [ "postgresql.service" ];

     

       
1300
       
 
       
        wantedBy = [ "gitlab.target" ];

     

       
1301
       
 
       
        partOf = [ "gitlab.target" ];

     

       
1302
       
 
       
        path = [

     
···

       
1561
       
 
       
    systemd.services.gitlab-db-config = {

     

       
1562
       
 
       
      after = [

     

       
1563
       
 
       
        "gitlab-config.service"

     

       
1564
       
-
       
        "gitlab-postgresql.service"

     

       
1565
       
-
       
        "postgresql.service"

     

       
1566
       
 
       
      ];

     

       
1567
       
 
       
      wants =

     

       
1568
       
-
       
        optional (cfg.databaseHost == "") "postgresql.service"

     

       
1569
       
-
       
        ++ optional databaseActuallyCreateLocally "gitlab-postgresql.service";

     

       
1570
       
 
       
      bindsTo = [ "gitlab-config.service" ];

     

       
1571
       
 
       
      wantedBy = [ "gitlab.target" ];

     

       
1572
       
 
       
      partOf = [ "gitlab.target" ];

     
···

       
1596
       
 
       
      after = [

     

       
1597
       
 
       
        "network.target"

     

       
1598
       
 
       
        "redis-gitlab.service"

     

       
1599
       
-
       
        "postgresql.service"

     

       
1600
       
 
       
        "gitlab-config.service"

     

       
1601
       
 
       
        "gitlab-db-config.service"

     

       
1602
       
 
       
      ];

     
···

       
1604
       
 
       
        "gitlab-config.service"

     

       
1605
       
 
       
        "gitlab-db-config.service"

     

       
1606
       
 
       
      ];

     

       
1607
       
-
       
      wants = [ "redis-gitlab.service" ] ++ optional (cfg.databaseHost == "") "postgresql.service";

     

       
1608
       
 
       
      wantedBy = [ "gitlab.target" ];

     

       
1609
       
 
       
      partOf = [ "gitlab.target" ];

     

       
1610
       
 
       
      environment =

     
···

       
1847
       
 
       
        "gitlab-config.service"

     

       
1848
       
 
       
        "gitlab-db-config.service"

     

       
1849
       
 
       
      ];

     

       
1850
       
-
       
      wants = [ "redis-gitlab.service" ] ++ optional (cfg.databaseHost == "") "postgresql.service";

     

       
1851
       
 
       
      requiredBy = [ "gitlab.target" ];

     

       
1852
       
 
       
      partOf = [ "gitlab.target" ];

     

       
1853
       
 
       
      environment = gitlabEnv;

     

···

       
1295
       
 
       
        pgsql = config.services.postgresql;

     

       
1296
       
 
       
      in

     

       
1297
       
 
       
      mkIf databaseActuallyCreateLocally {

     

       
1298
       
+
       
        after = [ "postgresql.target" ];

     

       
1299
       
+
       
        bindsTo = [ "postgresql.target" ];

     

       
1300
       
 
       
        wantedBy = [ "gitlab.target" ];

     

       
1301
       
 
       
        partOf = [ "gitlab.target" ];

     

       
1302
       
 
       
        path = [

     
···

       
1561
       
 
       
    systemd.services.gitlab-db-config = {

     

       
1562
       
 
       
      after = [

     

       
1563
       
 
       
        "gitlab-config.service"

     

       
1564
       
+
       
        "gitlab-postgresql.target"

     

       
1565
       
+
       
        "postgresql.target"

     

       
1566
       
 
       
      ];

     

       
1567
       
 
       
      wants =

     

       
1568
       
+
       
        optional (cfg.databaseHost == "") "postgresql.target"

     

       
1569
       
+
       
        ++ optional databaseActuallyCreateLocally "gitlab-postgresql.target";

     

       
1570
       
 
       
      bindsTo = [ "gitlab-config.service" ];

     

       
1571
       
 
       
      wantedBy = [ "gitlab.target" ];

     

       
1572
       
 
       
      partOf = [ "gitlab.target" ];

     
···

       
1596
       
 
       
      after = [

     

       
1597
       
 
       
        "network.target"

     

       
1598
       
 
       
        "redis-gitlab.service"

     

       
1599
       
+
       
        "postgresql.target"

     

       
1600
       
 
       
        "gitlab-config.service"

     

       
1601
       
 
       
        "gitlab-db-config.service"

     

       
1602
       
 
       
      ];

     
···

       
1604
       
 
       
        "gitlab-config.service"

     

       
1605
       
 
       
        "gitlab-db-config.service"

     

       
1606
       
 
       
      ];

     

       
1607
       
+
       
      wants = [ "redis-gitlab.service" ] ++ optional (cfg.databaseHost == "") "postgresql.target";

     

       
1608
       
 
       
      wantedBy = [ "gitlab.target" ];

     

       
1609
       
 
       
      partOf = [ "gitlab.target" ];

     

       
1610
       
 
       
      environment =

     
···

       
1847
       
 
       
        "gitlab-config.service"

     

       
1848
       
 
       
        "gitlab-db-config.service"

     

       
1849
       
 
       
      ];

     

       
1850
       
+
       
      wants = [ "redis-gitlab.service" ] ++ optional (cfg.databaseHost == "") "postgresql.target";

     

       
1851
       
 
       
      requiredBy = [ "gitlab.target" ];

     

       
1852
       
 
       
      partOf = [ "gitlab.target" ];

     

       
1853
       
 
       
      environment = gitlabEnv;

     

···

       
491
       
 
       
              fi

     

       
492
       
 
       
            fi

     

       
493
       
 
       
          '';

     

       
494
       
-
       
          requires = lib.optional cfg.database.createLocally "postgresql.service";

     

       
495
       
 
       
          after =

     

       
496
       
 
       
            lib.optional enableRedis "redis-paperless.service"

     

       
497
       
-
       
            ++ lib.optional cfg.database.createLocally "postgresql.service";

     

       
498
       
 
       
        };

     

       
499
       
 
       


     

       
500
       
 
       
        systemd.services.paperless-task-queue = {

     

       
501
       
 
       
          description = "Paperless Celery Workers";

     

       
502
       
-
       
          requires = lib.optional cfg.database.createLocally "postgresql.service";

     

       
503
       
 
       
          after = [

     

       
504
       
 
       
            "paperless-scheduler.service"

     

       
505
       
-
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.service";

     

       
506
       
 
       
          serviceConfig = defaultServiceConfig // {

     

       
507
       
 
       
            User = cfg.user;

     

       
508
       
 
       
            ExecStart = "${cfg.package}/bin/celery --app paperless worker --loglevel INFO";

     
···

       
520
       
 
       
          # Bind to `paperless-scheduler` so that the consumer never runs

     

       
521
       
 
       
          # during migrations

     

       
522
       
 
       
          bindsTo = [ "paperless-scheduler.service" ];

     

       
523
       
-
       
          requires = lib.optional cfg.database.createLocally "postgresql.service";

     

       
524
       
 
       
          after = [

     

       
525
       
 
       
            "paperless-scheduler.service"

     

       
526
       
-
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.service";

     

       
527
       
 
       
          serviceConfig = defaultServiceConfig // {

     

       
528
       
 
       
            User = cfg.user;

     

       
529
       
 
       
            ExecStart = "${cfg.package}/bin/paperless-ngx document_consumer";

     
···

       
541
       
 
       
          # Bind to `paperless-scheduler` so that the web server never runs

     

       
542
       
 
       
          # during migrations

     

       
543
       
 
       
          bindsTo = [ "paperless-scheduler.service" ];

     

       
544
       
-
       
          requires = lib.optional cfg.database.createLocally "postgresql.service";

     

       
545
       
 
       
          after = [

     

       
546
       
 
       
            "paperless-scheduler.service"

     

       
547
       
-
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.service";

     

       
548
       
 
       
          # Setup PAPERLESS_SECRET_KEY.

     

       
549
       
 
       
          # If this environment variable is left unset, paperless-ngx defaults

     

       
550
       
 
       
          # to a well-known value, which is insecure.

     

···

       
491
       
 
       
              fi

     

       
492
       
 
       
            fi

     

       
493
       
 
       
          '';

     

       
494
       
+
       
          requires = lib.optional cfg.database.createLocally "postgresql.target";

     

       
495
       
 
       
          after =

     

       
496
       
 
       
            lib.optional enableRedis "redis-paperless.service"

     

       
497
       
+
       
            ++ lib.optional cfg.database.createLocally "postgresql.target";

     

       
498
       
 
       
        };

     

       
499
       
 
       


     

       
500
       
 
       
        systemd.services.paperless-task-queue = {

     

       
501
       
 
       
          description = "Paperless Celery Workers";

     

       
502
       
+
       
          requires = lib.optional cfg.database.createLocally "postgresql.target";

     

       
503
       
 
       
          after = [

     

       
504
       
 
       
            "paperless-scheduler.service"

     

       
505
       
+
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.target";

     

       
506
       
 
       
          serviceConfig = defaultServiceConfig // {

     

       
507
       
 
       
            User = cfg.user;

     

       
508
       
 
       
            ExecStart = "${cfg.package}/bin/celery --app paperless worker --loglevel INFO";

     
···

       
520
       
 
       
          # Bind to `paperless-scheduler` so that the consumer never runs

     

       
521
       
 
       
          # during migrations

     

       
522
       
 
       
          bindsTo = [ "paperless-scheduler.service" ];

     

       
523
       
+
       
          requires = lib.optional cfg.database.createLocally "postgresql.target";

     

       
524
       
 
       
          after = [

     

       
525
       
 
       
            "paperless-scheduler.service"

     

       
526
       
+
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.target";

     

       
527
       
 
       
          serviceConfig = defaultServiceConfig // {

     

       
528
       
 
       
            User = cfg.user;

     

       
529
       
 
       
            ExecStart = "${cfg.package}/bin/paperless-ngx document_consumer";

     
···

       
541
       
 
       
          # Bind to `paperless-scheduler` so that the web server never runs

     

       
542
       
 
       
          # during migrations

     

       
543
       
 
       
          bindsTo = [ "paperless-scheduler.service" ];

     

       
544
       
+
       
          requires = lib.optional cfg.database.createLocally "postgresql.target";

     

       
545
       
 
       
          after = [

     

       
546
       
 
       
            "paperless-scheduler.service"

     

       
547
       
+
       
          ] ++ lib.optional cfg.database.createLocally "postgresql.target";

     

       
548
       
 
       
          # Setup PAPERLESS_SECRET_KEY.

     

       
549
       
 
       
          # If this environment variable is left unset, paperless-ngx defaults

     

       
550
       
 
       
          # to a well-known value, which is insecure.

     

···

       
374
       
 
       
      after =

     

       
375
       
 
       
        [ "network.target" ]

     

       
376
       
 
       
        ++ lib.optional mysqlLocal "mysql.service"

     

       
377
       
-
       
        ++ lib.optional pgsqlLocal "postgresql.service";

     

       
378
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
379
       
 
       
      environment.RAILS_ENV = "production";

     

       
380
       
 
       
      environment.RAILS_CACHE = "${cfg.stateDir}/cache";

     

···

       
374
       
 
       
      after =

     

       
375
       
 
       
        [ "network.target" ]

     

       
376
       
 
       
        ++ lib.optional mysqlLocal "mysql.service"

     

       
377
       
+
       
        ++ lib.optional pgsqlLocal "postgresql.target";

     

       
378
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
379
       
 
       
      environment.RAILS_ENV = "production";

     

       
380
       
 
       
      environment.RAILS_CACHE = "${cfg.stateDir}/cache";

     

···

       
52
       
 
       
      {

     

       
53
       
 
       
        after =

     

       
54
       
 
       
          [ "network.target" ]

     

       
55
       
-
       
          ++ optional cfg.postgresql.enable "postgresql.service"

     

       
56
       
 
       
          ++ optional cfg.redis.enable "redis-sourcehut-${srvsrht}.service";

     

       
57
       
 
       
        requires =

     

       
58
       
-
       
          optional cfg.postgresql.enable "postgresql.service"

     

       
59
       
 
       
          ++ optional cfg.redis.enable "redis-sourcehut-${srvsrht}.service";

     

       
60
       
 
       
        path = [ pkgs.gawk ];

     

       
61
       
 
       
        environment.HOME = runDir;

     
···

       
482
       
 
       
            && lib.strings.versionAtLeast config.services.postgresql.package.version "15.0"

     

       
483
       
 
       
          )

     

       
484
       
 
       
          {

     

       
485
       
-
       
            postgresql.postStart = (

     

       
486
       
-
       
              lib.mkAfter ''

     

       
487
       
-
       
                $PSQL -tAc 'ALTER DATABASE "${srvCfg.postgresql.database}" OWNER TO "${srvCfg.user}";'

     

       
488
       
-
       
              ''

     

       
489
       
-
       
            );

     

       
490
       
 
       
          }

     

       
491
       
 
       
        )

     

       
492
       
 
       
      ];

     

···

       
52
       
 
       
      {

     

       
53
       
 
       
        after =

     

       
54
       
 
       
          [ "network.target" ]

     

       
55
       
+
       
          ++ optional cfg.postgresql.enable "postgresql.target"

     

       
56
       
 
       
          ++ optional cfg.redis.enable "redis-sourcehut-${srvsrht}.service";

     

       
57
       
 
       
        requires =

     

       
58
       
+
       
          optional cfg.postgresql.enable "postgresql.target"

     

       
59
       
 
       
          ++ optional cfg.redis.enable "redis-sourcehut-${srvsrht}.service";

     

       
60
       
 
       
        path = [ pkgs.gawk ];

     

       
61
       
 
       
        environment.HOME = runDir;

     
···

       
482
       
 
       
            && lib.strings.versionAtLeast config.services.postgresql.package.version "15.0"

     

       
483
       
 
       
          )

     

       
484
       
 
       
          {

     

       
485
       
+
       
            postgresql-setup.postStart = ''

     

       
486
       
+
       
              psql -tAc 'ALTER DATABASE "${srvCfg.postgresql.database}" OWNER TO "${srvCfg.user}";'

     

       
487
       
+
       
            '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
488
       
 
       
          }

     

       
489
       
 
       
        )

     

       
490
       
 
       
      ];

     

···

       
2020
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
2021
       
 
       
      after =

     

       
2022
       
 
       
        [ "networking.target" ]

     

       
2023
       
-
       
        ++ lib.optional usePostgresql "postgresql.service"

     

       
2024
       
 
       
        ++ lib.optional useMysql "mysql.service";

     

       
2025
       
 
       
      script = ''

     

       
2026
       
 
       
        set -o errexit -o pipefail -o nounset -o errtrace

     

···

       
2020
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
2021
       
 
       
      after =

     

       
2022
       
 
       
        [ "networking.target" ]

     

       
2023
       
+
       
        ++ lib.optional usePostgresql "postgresql.target"

     

       
2024
       
 
       
        ++ lib.optional useMysql "mysql.service";

     

       
2025
       
 
       
      script = ''

     

       
2026
       
 
       
        set -o errexit -o pipefail -o nounset -o errtrace

     

···

       
337
       
 
       
      description = "Zabbix Proxy";

     

       
338
       
 
       


     

       
339
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
340
       
-
       
      after = optional mysqlLocal "mysql.service" ++ optional pgsqlLocal "postgresql.service";

     

       
341
       
 
       


     

       
342
       
 
       
      path = [ "/run/wrappers" ] ++ cfg.extraPackages;

     

       
343
       
 
       
      preStart =

     

···

       
337
       
 
       
      description = "Zabbix Proxy";

     

       
338
       
 
       


     

       
339
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
340
       
+
       
      after = optional mysqlLocal "mysql.service" ++ optional pgsqlLocal "postgresql.target";

     

       
341
       
 
       


     

       
342
       
 
       
      path = [ "/run/wrappers" ] ++ cfg.extraPackages;

     

       
343
       
 
       
      preStart =

     

···

       
328
       
 
       
      description = "Zabbix Server";

     

       
329
       
 
       


     

       
330
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
331
       
-
       
      after = optional mysqlLocal "mysql.service" ++ optional pgsqlLocal "postgresql.service";

     

       
332
       
 
       


     

       
333
       
 
       
      path = [ "/run/wrappers" ] ++ cfg.extraPackages;

     

       
334
       
 
       
      preStart =

     
···

       
374
       
 
       


     

       
375
       
 
       
    systemd.services.httpd.after =

     

       
376
       
 
       
      optional (config.services.zabbixWeb.enable && mysqlLocal) "mysql.service"

     

       
377
       
-
       
      ++ optional (config.services.zabbixWeb.enable && pgsqlLocal) "postgresql.service";

     

       
378
       
 
       


     

       
379
       
 
       
  };

     

       
380
       
 
       


     

···

       
328
       
 
       
      description = "Zabbix Server";

     

       
329
       
 
       


     

       
330
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
331
       
+
       
      after = optional mysqlLocal "mysql.service" ++ optional pgsqlLocal "postgresql.target";

     

       
332
       
 
       


     

       
333
       
 
       
      path = [ "/run/wrappers" ] ++ cfg.extraPackages;

     

       
334
       
 
       
      preStart =

     
···

       
374
       
 
       


     

       
375
       
 
       
    systemd.services.httpd.after =

     

       
376
       
 
       
      optional (config.services.zabbixWeb.enable && mysqlLocal) "mysql.service"

     

       
377
       
+
       
      ++ optional (config.services.zabbixWeb.enable && pgsqlLocal) "postgresql.target";

     

       
378
       
 
       


     

       
379
       
 
       
  };

     

       
380
       
 
       


     

···

       
169
       
 
       


     

       
170
       
 
       
    systemd.services.atticd = {

     

       
171
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
172
       
-
       
      after = [ "network-online.target" ] ++ lib.optionals hasLocalPostgresDB [ "postgresql.service" ];

     

       
173
       
-
       
      requires = lib.optionals hasLocalPostgresDB [ "postgresql.service" ];

     

       
174
       
 
       
      wants = [ "network-online.target" ];

     

       
175
       
 
       


     

       
176
       
 
       
      serviceConfig = {

     

···

       
169
       
 
       


     

       
170
       
 
       
    systemd.services.atticd = {

     

       
171
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
172
       
+
       
      after = [ "network-online.target" ] ++ lib.optionals hasLocalPostgresDB [ "postgresql.target" ];

     

       
173
       
+
       
      requires = lib.optionals hasLocalPostgresDB [ "postgresql.target" ];

     

       
174
       
 
       
      wants = [ "network-online.target" ];

     

       
175
       
 
       


     

       
176
       
 
       
      serviceConfig = {

     

···

       
1105
       
 
       
      systemd.services.firezone-initialize = {

     

       
1106
       
 
       
        description = "Backend initialization service for the Firezone zero-trust access platform";

     

       
1107
       
 
       


     

       
1108
       
-
       
        after = mkIf cfg.enableLocalDB [ "postgresql.service" ];

     

       
1109
       
-
       
        requires = mkIf cfg.enableLocalDB [ "postgresql.service" ];

     

       
1110
       
 
       
        wantedBy = [ "firezone.target" ];

     

       
1111
       
 
       
        partOf = [ "firezone.target" ];

     

       
1112
       
 
       


     

···

       
1105
       
 
       
      systemd.services.firezone-initialize = {

     

       
1106
       
 
       
        description = "Backend initialization service for the Firezone zero-trust access platform";

     

       
1107
       
 
       


     

       
1108
       
+
       
        after = mkIf cfg.enableLocalDB [ "postgresql.target" ];

     

       
1109
       
+
       
        requires = mkIf cfg.enableLocalDB [ "postgresql.target" ];

     

       
1110
       
 
       
        wantedBy = [ "firezone.target" ];

     

       
1111
       
 
       
        partOf = [ "firezone.target" ];

     

       
1112
       
 
       


     

···

       
122
       
 
       
          wants = [ "network-online.target" ];

     

       
123
       
 
       
          after = [

     

       
124
       
 
       
            "network-online.target"

     

       
125
       
-
       
            "postgresql.service"

     

       
126
       
 
       
          ];

     

       
127
       
 
       
          wantedBy = [ "pleroma.service" ];

     

       
128
       
 
       
          environment.RELEASE_COOKIE = "/var/lib/pleroma/.cookie";

     

···

       
122
       
 
       
          wants = [ "network-online.target" ];

     

       
123
       
 
       
          after = [

     

       
124
       
 
       
            "network-online.target"

     

       
125
       
+
       
            "postgresql.target"

     

       
126
       
 
       
          ];

     

       
127
       
 
       
          wantedBy = [ "pleroma.service" ];

     

       
128
       
 
       
          environment.RELEASE_COOKIE = "/var/lib/pleroma/.cookie";

     

···

       
53
       
 
       
      after = [

     

       
54
       
 
       
        "network.target"

     

       
55
       
 
       
        "mysql.service"

     

       
56
       
-
       
        "postgresql.service"

     

       
57
       
 
       
        "openldap.service"

     

       
58
       
 
       
      ];

     

       
59
       
 
       


     

···

       
53
       
 
       
      after = [

     

       
54
       
 
       
        "network.target"

     

       
55
       
 
       
        "mysql.service"

     

       
56
       
+
       
        "postgresql.target"

     

       
57
       
 
       
        "openldap.service"

     

       
58
       
 
       
      ];

     

       
59