nix
/
lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

postgres11 is old as shit

This commit is contained in:
niten 2024-01-05 14:11:15 -08:00
parent 8e08f115c5
commit 12d62caf25
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/fudo/auth/kerberos/kdc.nix
View File

@ -188,6 +188,7 @@ let
User = cfg.user; User = cfg.user;
Group = cfg.group; Group = cfg.group;
Type = "oneshot"; Type = "oneshot";
Restart = "on-failure";
RuntimeDirectory = "heimdal-hprop"; RuntimeDirectory = "heimdal-hprop";
ExecStartPre = pkgs.writeShellScript "kdc-prepare-hprop-dump.sh" ExecStartPre = pkgs.writeShellScript "kdc-prepare-hprop-dump.sh"
(concatStringsSep " " [ (concatStringsSep " " [
@ -325,10 +326,11 @@ let
LimitNOFILE = 4096; LimitNOFILE = 4096;
User = cfg.user; User = cfg.user;
Group = cfg.group; Group = cfg.group;
Restart = "always"; Restart =
RestartSec = "5s"; "never"; # Server will retry -- this results in stacking
AmbientCapabilities = "CAP_NET_BIND_SERVICE"; AmbientCapabilities = "CAP_NET_BIND_SERVICE";
SecureBits = "keep-caps"; SecureBits = "keep-caps";
ReadWritePaths = [ "${dirOf cfg.kdc.database}" ];
ExecStart = concatStringsSep " " [ ExecStart = concatStringsSep " " [
"${pkgs.heimdal}/libexec/heimdal/hpropd" "${pkgs.heimdal}/libexec/heimdal/hpropd"
"--database=sqlite:${cfg.kdc.database}" "--database=sqlite:${cfg.kdc.database}"

2
lib/fudo/postgres.nix
View File

@ -154,7 +154,7 @@ in {
package = mkOption { package = mkOption {
type = package; type = package;
description = "Which package to use for Postgresql server."; description = "Which package to use for Postgresql server.";
default = pkgs.postgresql_11_gssapi; default = pkgs.postgresql_15_gssapi;
}; };
ssl-private-key = mkOption { ssl-private-key = mkOption {