roles/dbserver-postgresql: explicitly add alloy user

2025-08-19 23:01:59 -07:00
parent 48a8f56860
commit 5213bf01b1
1 changed files with 9 additions and 3 deletions
--- a/roles/dbserver-postgresql.nix
+++ b/roles/dbserver-postgresql.nix
@@ -57,10 +57,16 @@ in

      authentication = pkgs.lib.mkOverride 10 ''
        local   replication     all     trust
-        local   all     all     peer
-        local   all     all     scram-sha-256
-        host    all     all     all     scram-sha-256
+        local   sameuser     all     peer
+        local   sameuser     all     scram-sha-256
+        host    sameuser     all     all     scram-sha-256
      '';
+
+      ensureUsers = [
+        {
+          name = "alloy";
+        }
+      ];
    };

    environment.etc."alloy/postgresql.alloy".text = ''