Fixup Databases

flake.lock: Update
Flake lock file updates: • Updated input 'home-manager': 'github:nix-community/home-manager/280721186ab75a76537713ec310306f0eba3e407' (2023-11-12) → 'github:nix-community/home-manager/1aabb0a31b25ad83cfaa37c3fe29053417cd9a0f' (2023-11-21) • Updated input 'nix-darwin': 'github:LnL7/nix-darwin/0f1ad801387445fdda01d080db8ecf169be8e793' (2023-11-11) → 'github:LnL7/nix-darwin/e67f2bf515343da378c3f82f098df8ca01bccc5f' (2023-11-13) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/85f1ba3e51676fa8cc604a3d863d729026a6b8eb' (2023-11-04) → 'github:NixOS/nixpkgs/e4ad989506ec7d71f7302cc3067abd82730a4beb' (2023-11-19) • Updated input 'sops-nix': 'github:Mic92/sops-nix/2fc3c9edc3029ed396ec917f39a7253acc3d8999' (2023-11-12) → 'github:Mic92/sops-nix/49a87c6c827ccd21c225531e30745a9a6464775c' (2023-11-19) • Updated input 'sops-nix/nixpkgs': 'github:NixOS/nixpkgs/9b92dad3804b543a8b5db878aabf7132d601fa91' (2023-11-07) → 'github:NixOS/nixpkgs/7414e9ee0b3e9903c24d3379f577a417f0aae5f1' (2023-11-16) • Updated input 'sops-nix/nixpkgs-stable': 'github:NixOS/nixpkgs/9502d0245983bb233da8083b55d60d96fd3c29ff' (2023-11-12) → 'github:NixOS/nixpkgs/decdf666c833a325cb4417041a90681499e06a41' (2023-11-18)
2023-11-21 09:24:51 -05:00 · 2023-11-21 09:24:24 -05:00
5 changed files with 27 additions and 32 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -66,11 +66,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1699025595,
-        "narHash": "sha256-e+o4PoSu2Z6Ww8y/AVUmMU200rNZoRK+p2opQ7Db8Rg=",
+        "lastModified": 1700553346,
+        "narHash": "sha256-kW7uWsCv/lxuA824Ng6EYD9hlVYRyjuFn0xBbYltAeQ=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "8765d4e38aa0be53cdeee26f7386173e6c65618d",
+        "rev": "1aabb0a31b25ad83cfaa37c3fe29053417cd9a0f",
        "type": "github"
      },
      "original": {
@@ -108,11 +108,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1698429334,
-        "narHash": "sha256-Gq3+QabboczSu7RMpcy79RSLMSqnySO3wsnHQk4DfbE=",
+        "lastModified": 1699867978,
+        "narHash": "sha256-+arl45HUOcBdKiRGrKXZYXDyBQ6MQGkYPZa/28f6Yzo=",
        "owner": "LnL7",
        "repo": "nix-darwin",
-        "rev": "afe83cbc2e673b1f08d32dd0f70df599678ff1e7",
+        "rev": "e67f2bf515343da378c3f82f098df8ca01bccc5f",
        "type": "github"
      },
      "original": {
@@ -124,11 +124,11 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1698924604,
-        "narHash": "sha256-GCFbkl2tj8fEZBZCw3Tc0AkGo0v+YrQlohhEGJ/X4s0=",
+        "lastModified": 1700390070,
+        "narHash": "sha256-de9KYi8rSJpqvBfNwscWdalIJXPo8NjdIZcEJum1mH0=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "fa804edfb7869c9fb230e174182a8a1a7e512c40",
+        "rev": "e4ad989506ec7d71f7302cc3067abd82730a4beb",
        "type": "github"
      },
      "original": {
@@ -156,11 +156,11 @@
    },
    "nixpkgs-stable_2": {
      "locked": {
-        "lastModified": 1698544399,
-        "narHash": "sha256-vhRmPyEyoPkrXF2iykBsWHA05MIaOSmMRLMF7Hul6+s=",
+        "lastModified": 1700342017,
+        "narHash": "sha256-HaibwlWH5LuqsaibW3sIVjZQtEM/jWtOHX4Nk93abGE=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "d87c5d8c41c9b3b39592563242f3a448b5cc4bc9",
+        "rev": "decdf666c833a325cb4417041a90681499e06a41",
        "type": "github"
      },
      "original": {
@@ -172,11 +172,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1698336494,
-        "narHash": "sha256-sO72WDBKyijYD1GcKPlGsycKbMBiTJMBCnmOxLAs880=",
+        "lastModified": 1700108881,
+        "narHash": "sha256-+Lqybl8kj0+nD/IlAWPPG/RDTa47gff9nbei0u7BntE=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "808c0d8c53c7ae50f82aca8e7df263225cf235bf",
+        "rev": "7414e9ee0b3e9903c24d3379f577a417f0aae5f1",
        "type": "github"
      },
      "original": {
@@ -201,11 +201,11 @@
        "nixpkgs-stable": "nixpkgs-stable_2"
      },
      "locked": {
-        "lastModified": 1699021419,
-        "narHash": "sha256-oy2j2OHXYcckifASMeZzpmbDLSvobMGt0V/RvoDotF4=",
+        "lastModified": 1700362823,
+        "narHash": "sha256-/H7XgvrYM0IbkpWkcdfkOH0XyBM5ewSWT1UtaLvOgKY=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "275b28593ef3a1b9d05b6eeda3ddce2f45f5c06f",
+        "rev": "49a87c6c827ccd21c225531e30745a9a6464775c",
        "type": "github"
      },
      "original": {
--- a/machines/hippocampus/servers/public/gitea.nix
+++ b/machines/hippocampus/servers/public/gitea.nix
@@ -36,11 +36,12 @@ in {
  services.postgresql = {
    enable = true;
    port = 5432;
+    ensureDatabases = [
+      "gitea"
+    ];
    ensureUsers = [{
      name = "gitea";
-      ensurePermissions = {
-        "DATABASE \"gitea\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
      ensureClauses = {
        createdb = true;
      };
--- a/machines/hippocampus/servers/public/nextcloud.nix
+++ b/machines/hippocampus/servers/public/nextcloud.nix
@@ -76,8 +76,8 @@ in {
      # generate video thumbnails with preview generator
      ffmpeg_5-headless
      # required for recognize app
-      nodejs-14_x # runtime and installation requirement
-      nodejs-14_x.pkgs.node-pre-gyp # installation requirement
+      nodejs_20 # runtime and installation requirement
+      nodejs_20.pkgs.node-pre-gyp # installation requirement
      util-linux # runtime requirement for taskset
    ];
  };
@@ -103,9 +103,7 @@ in {
    ];
    ensureUsers = [{
      name = "nextcloud";
-      ensurePermissions = {
-        "DATABASE \"nextcloud\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
      ensureClauses = {
        createdb = true;
      };
--- a/machines/hippocampus/servers/public/nextcloud/onlyoffice.nix
+++ b/machines/hippocampus/servers/public/nextcloud/onlyoffice.nix
@@ -42,9 +42,7 @@
    ];
    ensureUsers = [{
      name = "onlyoffice";
-      ensurePermissions = {
-        "DATABASE \"onlyoffice\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
    }];
  };
 }
--- a/machines/hippocampus/servers/public/vaultwarden.nix
+++ b/machines/hippocampus/servers/public/vaultwarden.nix
@@ -22,9 +22,7 @@
    ];
    ensureUsers = [{
      name = "vaultwarden";
-      ensurePermissions = {
-        "DATABASE \"vaultwarden\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
    }];
  };
  services.caddy.virtualHosts = {