Only need DB SSL if on a public network
This commit is contained in:
parent
09e6262e83
commit
deb3e455bd
@ -145,7 +145,7 @@ in {
|
|||||||
};
|
};
|
||||||
|
|
||||||
datasources = mkOption {
|
datasources = mkOption {
|
||||||
type = listOf (submodule datasourceOpts);
|
type = attrsOf (submodule datasourceOpts);
|
||||||
description = "A list of datasources supplied to Grafana.";
|
description = "A list of datasources supplied to Grafana.";
|
||||||
default = { };
|
default = { };
|
||||||
};
|
};
|
||||||
@ -231,7 +231,7 @@ in {
|
|||||||
user = cfg.database.user;
|
user = cfg.database.user;
|
||||||
password = "$__file{${cfg.database.password-file}}";
|
password = "$__file{${cfg.database.password-file}}";
|
||||||
type = "postgres";
|
type = "postgres";
|
||||||
ssl_mode = "require";
|
ssl_mode = if cfg.private-nework then "disable" else "require";
|
||||||
};
|
};
|
||||||
|
|
||||||
"ldap.auth" = mkIf (cfg.ldap != null) (let
|
"ldap.auth" = mkIf (cfg.ldap != null) (let
|
||||||
|
Loading…
x
Reference in New Issue
Block a user