group owned postgres password

This commit is contained in:
Tassilo - 2022-06-11 01:37:41 +02:00
parent 756e8e8f7e
commit 9a3bf8a568
Signed by: revol-xut
GPG Key ID: 4F56FF7759627D07

View File

@ -2,12 +2,20 @@
{
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
users.groups = {
postgres-dvbdump = {
name = "postgres-dvbdump";
members = [ config.users.users.clicky-bunty-server.name config.users.users.data-accumulator.name ];
};
};
sops.secrets = {
wg-seckey = { };
postgres_password_hash_salt = {
owner = config.users.users.clicky-bunty-server.name;
};
postgres_password = {
group = config.users.groups.postgres-dvbdump.name;
owner = config.users.users.clicky-bunty-server.name;
};
};