diff --git a/nixos/programs/postgres.nix b/nixos/programs/postgres.nix index eab8a30..0ff3435 100644 --- a/nixos/programs/postgres.nix +++ b/nixos/programs/postgres.nix @@ -3,7 +3,7 @@ config.services.postgresql = { enable = true; package = pkgs.postgresql_15; - ensureDatabases = [ "mastodon" "matrix-synapse" "nextcloud" "maddy" "plausible" "microboard" ]; + ensureDatabases = [ "mastodon" "matrix-synapse" "nextcloud" "maddy" "plausible" "microboard" "freshrss" ]; ensureUsers = [ { name = "mastodon"; @@ -47,6 +47,13 @@ }; ensureClauses.login = true; } + { + name = "freshrss"; + ensurePermissions = { + "DATABASE freshrss" = "ALL PRIVILEGES"; + }; + ensureClauses.login = true; + } ]; initialScript = pkgs.writeText "pg-init.sql" '' ALTER DATABASE nextcloud OWNER TO nextcloud; @@ -55,6 +62,7 @@ ALTER DATABASE maddy OWNER TO maddy; ALTER DATABASE plausible OWNER TO plausible; ALTER DATABASE microboard OWNER TO microboard; + ALTER DATABASE freshrss OWNER TO freshrss; ''; identMap = '' # ArbitraryMapName systemUser DBUser diff --git a/nixos/users.nix b/nixos/users.nix index a408bce..f8a8574 100644 --- a/nixos/users.nix +++ b/nixos/users.nix @@ -33,6 +33,10 @@ isSystemUser = true; group = "microboard"; }; + freshrss = { + isSystemUser = true; + group = "freshrss"; + }; }; users.groups = { @@ -43,5 +47,6 @@ maddy = {}; plausible = {}; microboard = {}; + freshrss = {}; }; }