gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(postgresql): int access

Browse source
This commit is contained in:
arcnmx 2024-03-25 17:16:36 -07:00
parent 6ad465e779
commit 80a5404d45
7 changed files with 24 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/nixos/postgres.nix
View file

@ -40,7 +40,9 @@
allow = mkEnableOption "tailscale TCP connections"; allow = mkEnableOption "tailscale TCP connections";
}; };
int = { int = {
allow = mkEnableOption "internal TCP connections"; allow = mkEnableOption "internal TCP connections" // {
default = config.authentication.local.allow;
};
}; };
local = { local = {
allow = mkEnableOption "local TCP connections"; allow = mkEnableOption "local TCP connections";
@ -87,7 +89,12 @@ in {
) )
cfg.ensureUsers); cfg.ensureUsers);
}; };
config.networking.firewall.interfaces.local = mkIf cfg.enable { config.networking.firewall.interfaces = {
allowedTCPPorts = mkIf (any (user: user.authentication.local.allow) cfg.ensureUsers) [cfg.port]; local = mkIf cfg.enable {
allowedTCPPorts = mkIf (any (user: user.authentication.local.allow) cfg.ensureUsers) [cfg.port];
};
int = mkIf cfg.enable {
allowedTCPPorts = mkIf (any (user: user.authentication.int.allow) cfg.ensureUsers) [cfg.port];
};
}; };
} }

2
nixos/invidious.nix
View file

@ -40,7 +40,7 @@ in {
}; };
}; };
database = { database = {
host = "postgresql.local.${config.networking.domain}"; host = "postgresql.int.${config.networking.domain}";
passwordFile = config.sops.secrets.invidious_db_password.path; passwordFile = config.sops.secrets.invidious_db_password.path;
createLocally = false; createLocally = false;
}; };

2
nixos/keycloak.nix
View file

@ -42,7 +42,7 @@ in {
enable = true; enable = true;
database = { database = {
host = "postgresql.local.${config.networking.domain}"; host = "postgresql.int.${config.networking.domain}";
passwordFile = config.sops.secrets.keycloak_db_password.path; passwordFile = config.sops.secrets.keycloak_db_password.path;
createLocally = false; createLocally = false;
useSSL = false; useSSL = false;

6
nixos/postgres.nix
View file

@ -13,12 +13,12 @@ in {
{ {
name = "hass"; name = "hass";
ensureDBOwnership = true; ensureDBOwnership = true;
authentication.tailscale.allow = !config.services.home-assistant.enable; authentication.int.allow = !config.services.home-assistant.enable;
} }
{ {
name = "invidious"; name = "invidious";
ensureDBOwnership = true; ensureDBOwnership = true;
authentication.local.allow = true; authentication.int.allow = true;
} }
{ {
name = "dex"; name = "dex";
@ -28,7 +28,7 @@ in {
{ {
name = "keycloak"; name = "keycloak";
ensureDBOwnership = true; ensureDBOwnership = true;
authentication.local.allow = true; authentication.int.allow = true;
} }
]; ];
}; };

6
nixos/secrets/home-assistant.yaml
View file

@ -1,4 +1,4 @@
ha-secrets: ENC[AES256_GCM,data:UveikMv6J0Mhc4sUTb4DfGlDE2k7DLtapJk1vw7tUL62ESlbUnW1386ombobu6u7Mk+V4S4K+ystLr01XJYzUvCe1EUYhNq+S/gSXfJtvBqO9D2BHus3hXmBJ1/y+YPZasFrmXHgidtKKfSFSo1863BOX5zBlnX94bHmTF5dRcLNSIDNmwQ8sT6UWy0iqBhngsK6dXx592Fx7/NngyGHBUdGOuP14EmcSzoegQ67N8yCasiQDc1d4WoVCBIp+LqLOdUs1ISeZoJz82CrVlDa/I4ZqgSBQ01El0/Ru0wCjoYkyJBK3EtKEaPWd3s3hgF1wFJwLgfL5MEIrMYcfHwrkmXcraWSltYoshcNZD7VqcxqB6XETRoXknUf+taa/HkRd9Fl06H9jiVK1mGM/FZF4FxtQkpiEaasjTKURPC4XPbwBPu8fOfqG3c8vAlZPf0A1DGPIo+N/4XCQS7s2XQmjHpix4xYfnOHyswYG6F4a+1shb3RhIeYlyUl1misAcm/TyX4eOrl79dcjI83jfUigi7MoqnpTffXRTo3SDg/WNTPdh7jJwR8oNfy43obpCYGV3LIM0ODMJOxNxg7Unj+VHCBgyjJAxm7je+00CfbuPx/Nx1GthZCiIRLHTum+yzURMjklzor+1OJAEnEdRCbS61QItKWwpzsRe/uspFp2zWjpL2OSYg2ATDttAyjuP/s356tRYY0Jy872OwkwwxK0hBByGK57o0Uh71dCVoK4c3HfEqy5bQ+ztjQ9zY7j9wvcSo1xmS2PJ1Cug==,iv:LRZ0WDCcGuYROOIH89gvIejPVAmJ/e/obs+SdXCrnE4=,tag:oYP1ZUVGDaUHtMys25A0Nw==,type:str] ha-secrets: ENC[AES256_GCM,data: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,iv:PluQDWP/S0rWrAebWIVgg1nmVwCuble+glEpR8gcwYQ=,tag:UKzGe3xF+TxRQ/v6jrPcAg==,type:str]
ha-integration: ENC[AES256_GCM,data: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,iv:3TMjBTRdPOr/dRJv8Xj1F/hQbHjEvzQ+Ye7gNsk9TkM=,tag:PnVZ9jaE8HU9g8xxtOP9Wg==,type:str] ha-integration: ENC[AES256_GCM,data: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,iv:3TMjBTRdPOr/dRJv8Xj1F/hQbHjEvzQ+Ye7gNsk9TkM=,tag:PnVZ9jaE8HU9g8xxtOP9Wg==,type:str]
sops: sops:
shamir_threshold: 1 shamir_threshold: 1
@ -34,8 +34,8 @@ sops:
SDdYSzBGZUY3azVKUExldVFZY1FJMFkKXbPHYjiMOlG3x4Zgi2IfWPCmf+zajdPD SDdYSzBGZUY3azVKUExldVFZY1FJMFkKXbPHYjiMOlG3x4Zgi2IfWPCmf+zajdPD
nrdh39ln8is/2U6U2EjNL5/7pJVYMyO2zMPYlta6rGdBflT5yu/Ubg== nrdh39ln8is/2U6U2EjNL5/7pJVYMyO2zMPYlta6rGdBflT5yu/Ubg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-02-18T19:47:20Z" lastmodified: "2024-03-26T00:15:36Z"
mac: ENC[AES256_GCM,data:wHZAnRkcnhZS4484OuYisN0F1+iIiwE5oFhzlbVz3Tic3xiBVXVTtvYwf3YCJHhcoNC4+dd+TSAOfQZIt6HJhTPSKxq0J17LaIOi8JDiiVHr403FdD1/Iw1SOAchFAe65Y7Y/26niT+nvi/9hSV0UDIe1mFfY8NYYKcPDqvoiFU=,iv:sbi19BkKErpqy/8itZh9Ln5vT+ycEJH9BS5p5jyB/FM=,tag:wRsilL5OIj3/cPJrJaPktg==,type:str] mac: ENC[AES256_GCM,data:xY4jUg8He6a3JlODPfmWJp06s8g51dnWhQg/hiR+yBtIFRqy+tAY2r6PWHFKxL91VBJs9mJTIg2xqU18SpT8kwlMGBfVKCWsP2a3rudpifRuJZqHUuJwKoYBq6WedKDhmbvRmI6jFb2e6VLymRur7DKjwvjcWDXL/w8ShJFqaWA=,iv:Dc3Hp6QQFdC5whNtZ60tnQ12TO7lYsHzbSw586xre28=,tag:OotZ1ISyfVu7E8H10Gfx1g==,type:str]
pgp: pgp:
- created_at: "2024-01-19T19:08:54Z" - created_at: "2024-01-19T19:08:54Z"
enc: |- enc: |-

4
tf/system/records/cnames.tf
View file

@ -14,6 +14,10 @@ locals {
name = "${subdomain}.local", name = "${subdomain}.local",
value = "${local.local_name}.${var.zone_zone}", value = "${local.local_name}.${var.zone_zone}",
}], }],
local.has_int ? [for subdomain in var.local_subdomains : {
name = "${subdomain}.int",
value = "${local.int_name}.${var.zone_zone}",
}] : [],
local.has_tailscale ? [for subdomain in var.local_subdomains : { local.has_tailscale ? [for subdomain in var.local_subdomains : {
name = "${subdomain}.tail", name = "${subdomain}.tail",
value = "${local.tailscale_name}.${var.zone_zone}", value = "${local.tailscale_name}.${var.zone_zone}",

3
tf/system/records/records.tf
View file

@ -94,7 +94,8 @@ locals {
tailscale_v6 = coalesce(var.tailscale_v6, local.tailscale_net.address6, local.empty_address) tailscale_v6 = coalesce(var.tailscale_v6, local.tailscale_net.address6, local.empty_address)
global_name = coalesce(var.global_name, var.name) global_name = coalesce(var.global_name, var.name)
has_tailscale = var.tailscale_v4 != null || var.tailscale_v6 != null has_tailscale = local.tailscale_v4 != local.empty_address || local.tailscale_v6 != local.empty_address
has_int = local.int_v4 != local.empty_address || local.int_v6 != local.empty_address
empty_address = "EMPTY" empty_address = "EMPTY"
empty_net = { empty_net = {
address4 = null address4 = null