M flake.nix → flake.nix

@@ -34,6 +34,7 @@ ./profiles/common/networking.nix
 
             ./profiles/runestone/hardware-configuration.nix
             ./profiles/runestone/base.nix
+            ./profiles/runestone/postgres.nix
           ];
         };
       };

M profiles/runestone/base.nix → profiles/runestone/base.nix

@@ -56,4 +56,6 @@ unstable-pkgs.lan-mouse
       unstable-pkgs.zed-editor
       unstable-pkgs.zed-editor.remote_server
     ];
+
+  services.cloudflare-warp.enable = true;
 }

A profiles/runestone/postgres.nix

@@ -0,0 +1,20 @@
+{ pkgs, ... }: {
+  services.postgresql = {
+    enable = true;
+    enableTCPIP = true;
+    settings = {
+      listen_addresses = pkgs.lib.mkForce "0.0.0.0";
+      port = pkgs.lib.mkForce 5432;
+    };
+    ensureDatabases = [ "orbismmo" ];
+    ensureUsers = [{
+      name = "orbismmo";
+      ensureDBOwnership = true;
+    }];
+    authentication = pkgs.lib.mkOverride 10 ''
+      local all       all     trust
+      host all all 0.0.0.0/0 scram-sha-256
+      host all all ::0/0 scram-sha-256
+    '';
+  };
+}