Compress Postgres logs
This commit is contained in:
@@ -1,4 +1,4 @@
|
|||||||
{ config, pkgs, ... }:
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
services.postgresql = {
|
services.postgresql = {
|
||||||
@@ -53,6 +53,10 @@ root root postgres
|
|||||||
postgresLog = {
|
postgresLog = {
|
||||||
enable = true;
|
enable = true;
|
||||||
files = "/var/lib/postgresql/*/log/*.log";
|
files = "/var/lib/postgresql/*/log/*.log";
|
||||||
|
extraConfig = (lib.strings.concatStringsSep "\n" [
|
||||||
|
"compress"
|
||||||
|
"compresscmd=${pkgs.xz}/bin/xz"
|
||||||
|
]);
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -68,8 +68,25 @@ return 200 '${builtins.toJSON client}';
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# Environment secrets
|
||||||
|
age.secrets.dendrite = {
|
||||||
|
file = ../../secrets/dendrite.age;
|
||||||
|
owner = "dendrite";
|
||||||
|
};
|
||||||
|
|
||||||
|
users.users.dendrite = {
|
||||||
|
isSystemUser = true;
|
||||||
|
group = "dendrite";
|
||||||
|
};
|
||||||
|
users.groups.dendrite = {};
|
||||||
|
|
||||||
|
systemd.services.dendrite.serviceConfig = {
|
||||||
|
User = "dendrite";
|
||||||
|
};
|
||||||
|
|
||||||
services.dendrite = {
|
services.dendrite = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
environmentFile = "/run/agenix/dendrite";
|
||||||
httpPort = 8448;
|
httpPort = 8448;
|
||||||
# Identify ourselves as the root of our own domain
|
# Identify ourselves as the root of our own domain
|
||||||
settings = {
|
settings = {
|
||||||
@@ -89,8 +106,10 @@ return 200 '${builtins.toJSON client}';
|
|||||||
# Generate this with {path-to-dendrite}/bin/generate-keys --private-key /etc/dendrite.pem
|
# Generate this with {path-to-dendrite}/bin/generate-keys --private-key /etc/dendrite.pem
|
||||||
private_key = "/etc/dendrite.pem";
|
private_key = "/etc/dendrite.pem";
|
||||||
};
|
};
|
||||||
client_api.registration_enabled = false;
|
client_api = {
|
||||||
#registration_shared_secret = "B9EoPr2WV9hzwc7uL2Sx1JmvCeKDEOGCpB0uginQcQtEH4wzRtkSIdo7lltrjSQa";
|
egistration_enabled = false;
|
||||||
|
registration_shared_secret = "\${REGISTRATION_SHARED_SECRET}";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
@@ -0,0 +1,40 @@
|
|||||||
|
age-encryption.org/v1
|
||||||
|
-> ssh-rsa KsR+0w
|
||||||
|
R2PsRmdINg0rmUBmA1LPw/BTmmqU6mRZ3ge0jCmBYXJ3mXK3KPtDDkEHD5mD0aeb
|
||||||
|
50pYQjOj4TGQS2sUH6VpPHbjLtJJ3Wp3ASOdJkJD/BLhcq8fk6Z4C0O+x2O2EySO
|
||||||
|
tEHefkn1WMFHatbx222h6M75p2XftJMb9+lvG3DcoucgqJp3SlvXCoy9Yvm/ByuS
|
||||||
|
aIzcThtmG8dLYP0QqQXUBYC3juf60KOyg9HdDGyTGESkQxv1NrOMkMQwXS/LfThb
|
||||||
|
WUhsPRUMHrsGs/22v06F5a3dhtoe5Q7YdX1gEVVyv/91rAo/8Y7iLhABKH3F0oBL
|
||||||
|
sfQysiEecEUM2NHV9+ULX6ILbkommnI/ApiPrg2eZPulllqI8+8/Me2tAkfOrH/g
|
||||||
|
GZglwOD+wBadbfhreq3bZbf5DTgs3Tnt+AgSOtoxPKFCHEP//J2olLcOD6SaLbyO
|
||||||
|
p8aDIlcwTSIH6SlX2srCGuGyCINkZu/LqeDMLJCJ/cKeGJ9WClhcoRrs0NyThfCQ
|
||||||
|
fnoL35i5JBkZoJqm1REx0nfZN88YuXBKxFItw7hagJpY/D1Ob0Z51oEhQaIDUyXx
|
||||||
|
1CzTOUoyFmtTdrXdfHnzHbqA6truG9nk2Sx7XeYgUtEuoaKL1yjSiLiVe91aYJ2u
|
||||||
|
IXglgHZxGvoCx5PHVK6x1EwvedyPGWMuViqB0Xi/ryg
|
||||||
|
-> ssh-rsa mMfKqA
|
||||||
|
F4lbJ/lcN/2aQ0q7jV3TIhGnH3UvEz5/CZY+kTDrq++If/ywfZ8KqW9y90u9bDUn
|
||||||
|
7E/vQ27p581byFLEeNVNddMgqLyup5Yb0Qf7mcJqJyYYpcBNbhiY3/0pwzlXjJ+1
|
||||||
|
KaaNCnCKRwHa2zPbC6ntLiU5FXNNjolp9vcthlmsVTPDnCTYyi0ymlyi+eBpWMph
|
||||||
|
fb3Kf1Bnv2GDMEO1/02vXIn7mYbU41rd2sD7U1bGQKPI4zewQVWXOdDqDAJZ4TTO
|
||||||
|
mPnuG3bruhrQt5AHHsGIyiZMMk412ZHdl91RGQp8NU4X9Sqr4IsoJWQ/sXAuuArf
|
||||||
|
eHqFfh7dqKmkZdpSVWFPboTwAlFdSUD2fhSscD2RPvvnuUsWpm8SlJCrPtRylNex
|
||||||
|
DxZeS7Nd5+Z/rVpyeSXywMAZNtr9fjhabRULoPopkC97Rl/uu2VR/yS6gvyFYsgH
|
||||||
|
sqI7wB57vRewrqvGsGCSwH7ixTq7ZpH6J0Ir/46IxD/pJmLFKsqbyrRKQEFMqXEj
|
||||||
|
b3hOqWxdApGSpZiNYNAJq/BFG3wjtD3j1k56DaT2ndkKSP+tKKg9JCh3/50LJAwZ
|
||||||
|
kzNvw78NM19XVQVe6O4YZrK9f8IdEb6paepDhoJ5yTs1oPq9DoNaBu9qqksazi8J
|
||||||
|
Wvs8QQU/HE6WW+9IcOb3VX7bs22va+RP/veIIk6cTWyiqB3QNftwKe49PklIH1Gu
|
||||||
|
iCGSF8BLDmiRIUeNEFm9SwwxZseJWGFvwLc33DtAtroxF/5d4Da5ZAHkyeNVvWxI
|
||||||
|
9txHyZgXq+9CmzUpWzi2fuaQhzS/hnJJCllfmPUOUu9rfRX4C++/pjxWvKfXZaPC
|
||||||
|
sq0vypRGJA4CRFzpWxqsvGC/2/gOyi4bYFvsAY6uK112V1YFZC5NxwOitfciGHL1
|
||||||
|
/Xqj3m8ktZ1wjbYLGWWnHG3Oocn8iqVkZoUiqLmhJq3ZNtvf4w1eXseZyCKr7ewf
|
||||||
|
jdtzb8c8LppQbOLSrMl5zrkUAdl54ABlR+9NviEPUWeJgCIYRK/IepxSjGM2qg7m
|
||||||
|
0fMbZlU8VR8EPRVIlHFXpRodBEJVbJmSRUkbkQcRHhmPXTcJtMaTZ3myB/YIhPA7
|
||||||
|
en7He8NRd6EK81SrVuyGAV2FJvtyTpu3xC7gNw+Gk1VK2w1P4X44VMZyx8p854XH
|
||||||
|
Hjl/YvFwEfJ/BLGAFMoVCY5L7dVg1LpurDHVp6qyPfpnfL1AJrmyr6l1r1dc6c2L
|
||||||
|
8Dr2iPb2mMtPsc+iLKvUlQ294xLNOL8suSxtbEPPLShDha+O/gxc6ZIcI/PrqYjH
|
||||||
|
6yVUcFmmhboK3R0P7ixTNIdufoDDYElpJqmuBRCNN4RLCnkZmavJbcvDixN27+LC
|
||||||
|
GviSA/gv5SbQ52xhqLHQ+A
|
||||||
|
-> t0bR}S-grease Lu?rS2 T75`p ]j4 52B.Y%W+
|
||||||
|
ciIU5BVUMwJ73pnPNhhFbksGL6pBg2RGuUBbEONYvbU
|
||||||
|
--- ZW5rizNGFWnLTd0dW9PaC8sVsYPZN7hDX6dXZRzRAQw
|
||||||
|
Sé.ÕÃHÓk"␍Ã/ÞmÆê?DmäÌ>Uû�/-þ�Gµ³/dqBôB8v&␍†hüØñØ]Ns�}qó&CïóÇWáUzë¡Ø*¦×“G¤'ó‰1�µAÙÓDšÞ
|
||||||
@@ -4,6 +4,7 @@ let
|
|||||||
systems = [ linode macca2 ];
|
systems = [ linode macca2 ];
|
||||||
|
|
||||||
user = "ssh-rsa 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 ghelling@unknown38BAF87CD102";
|
user = "ssh-rsa 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 ghelling@unknown38BAF87CD102";
|
||||||
|
linode_user = "ssh-rsa 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 greg@linode";
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
# Demo of how to create it
|
# Demo of how to create it
|
||||||
@@ -16,4 +17,6 @@ in
|
|||||||
"drone.age".publicKeys = [ linode user ];
|
"drone.age".publicKeys = [ linode user ];
|
||||||
|
|
||||||
"3proxy.age".publicKeys = [ macca2 user ];
|
"3proxy.age".publicKeys = [ macca2 user ];
|
||||||
|
|
||||||
|
"dendrite.age".publicKeys = [ linode linode_user ];
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user