mimas: fix postgres-exporter access
Martin Weinelt committed
Jul 16, 2026 at 00:11 UTC
43d44bffe2c665bacb508507b1fb4d0b9089467e
1 file changed
+6
-8
build/mimas/postgresql.nix
+6
-8
@@ -1,5 +1,6 @@
1
{
2
config,
3
+ lib,
4
pkgs,
5
...
6
}:
@@ -7,7 +8,9 @@
8
{
9
services.prometheus.exporters.postgres = {
10
enable = true;
10
- dataSourceName = "user=root database=hydra host=/run/postgresql sslmode=disable";
11
+ # CREATE USER "postgres-exporter";
12
+ # GRANT pg_monitor TO "postgres-exporter";
13
+ dataSourceName = "user=postgres-exporter database=hydra host=/run/postgresql sslmode=disable";
14
openFirewall = true;
15
firewallRules = ''
16
ip6 saddr $prometheus_inet6 tcp dport ${toString config.services.prometheus.exporters.postgres.port} accept
@@ -90,13 +93,8 @@
93
compute_query_id = "on";
94
};
95
93
- authentication = ''
94
- local all root peer map=prometheus
95
- '';
96
-
97
- identMap = ''
98
- prometheus root root
99
- prometheus postgres-exporter root
96
+ authentication = lib.mkBefore ''
97
+ local all postgres-exporter peer
98
'';
99
};
100
}