···

       
242
       
242
       
 
       
      } cfg.nginx.virtualHost ];

     

       
243
       
243
       
 
       
    };

     

       
244
       
244
       
 
       


     

       
245
       
245
       
-
       
    assertions = [

     

       
246
       
246
       
-
       
      {

     

       
247
       
247
       
-
       
        assertion = srvCfg.user == srvCfg.postgresql.database;

     

       
248
       
248
       
-
       
        message = ''

     

       
249
       
249
       
-
       
          When creating a database via NixOS, the db user and db name must be equal!

     

       
250
       
250
       
-
       
        '';

     

       
251
       
251
       
-
       
      }

     

       
252
       
252
       
-
       
    ];

     

       
253
       
253
       
-
       


     

       
254
       
245
       
 
       
    services.postgresql = mkIf cfg.postgresql.enable {

     

       
255
       
246
       
 
       
      authentication = ''

     

       
256
       
247
       
 
       
        local ${srvCfg.postgresql.database} ${srvCfg.user} trust

     
···

       
258
       
249
       
 
       
      ensureDatabases = [ srvCfg.postgresql.database ];

     

       
259
       
250
       
 
       
      ensureUsers = map (name: {

     

       
260
       
251
       
 
       
          inherit name;

     

       
261
       
261
       
-
       
          ensureDBOwnership = true;

     

       
252
       
252
       
+
       
          # We don't use it because we have a special default database name with dots.

     

       
253
       
253
       
+
       
          # TODO(for maintainers of sourcehut): migrate away from custom preStart script.

     

       
254
       
254
       
+
       
          ensureDBOwnership = false;

     

       
262
       
255
       
 
       
        }) [srvCfg.user];

     

       
263
       
256
       
 
       
    };

     

       
257
       
257
       
+
       


     

       
264
       
258
       
 
       


     

       
265
       
259
       
 
       
    services.sourcehut.settings = mkMerge [

     

       
266
       
260
       
 
       
      {

     
···

       
387
       
381
       
 
       
        extraService

     

       
388
       
382
       
 
       
      ])) extraServices)

     

       
389
       
383
       
 
       


     

       
390
       
390
       
-
       
      # Work around 'pq: permission denied for schema public' with postgres v15, until a

     

       
391
       
391
       
-
       
      # solution for `services.postgresql.ensureUsers` is found.

     

       
384
       
384
       
+
       
      # Work around 'pq: permission denied for schema public' with postgres v15.

     

       
392
       
385
       
 
       
      # See https://github.com/NixOS/nixpkgs/issues/216989

     

       
393
       
386
       
 
       
      # Workaround taken from nixos/forgejo: https://github.com/NixOS/nixpkgs/pull/262741

     

       
387
       
387
       
+
       
      # TODO(to maintainers of sourcehut): please migrate away from this workaround

     

       
388
       
388
       
+
       
      # by migrating away from database name defaults with dots.

     

       
394
       
389
       
 
       
      (lib.mkIf (

     

       
395
       
390
       
 
       
          cfg.postgresql.enable

     

       
396
       
391
       
 
       
          && lib.strings.versionAtLeast config.services.postgresql.package.version "15.0"