up

hosts/mindy/default.nix

@@ -53,4 +53,15 @@
 	};
 
 	networking.hostName = hostname;
+
+	services.postgresql = {
+		ensureDatabases = ["shnosh"];
+		ensureUsers = [
+			{
+				name = "shnosh";
+				ensureDBOwnership = true;
+				ensureClauses.superuser = true;
+			}
+		];
+	};
 }

profiles/postgresql.nix

@@ -23,8 +23,11 @@
 				host    all       all         127.0.0.1/32    scram-sha-256
 				host    all       all         ::1/128         scram-sha-256
 				host    all       all         100.64.0.0/10   scram-sha-256
+				host    all       all         172.18.0.0/12   scram-sha-256
 			'';
 	};
 
+	networking.firewall.interfaces."docker0".allowedTCPPorts = [5432];
 	networking.firewall.interfaces."tailscale0".allowedTCPPorts = [5432];
+  networking.firewall.interfaces."br-+".allowedTCPPorts = [5432];
 }