postgres

postgres copied to clipboard

custom pam

12

## What kind of change does this PR introduce? * passes in an arg to use go 1.24 since that is not the default go version we're using in nixpkgs...

samrose

feature: testing the creation of auth_trgm to give auth own pg_trgm

4

The goal: Allow access to pg_trgm extension for auth service while not intruding on customer/user usage of pg_trgm This pr will copy and use some files from pg_trgm to make...

samrose

Depends on #1941 ## Refactor AMI builds to use nightly base image ### Summary This PR refactors the AMI build pipeline to separate platform provisioning (stage 1) from application installation...

samrose

Adds an additional path to the systemd config

staaldraad

fix: set restart limits to 0 to prevent being marked as failed

1

The systemd default is 10s / 5 for these values with a DefaultRestartUSec of 100ms. Most services set a RestartSec limit of 3, under most circumstances it takes 15s to...

cstockton

feat: test pg_upgrade compatibility with older extension versions

1

Add test to verify that all extension versions from PostgreSQL 15 can successfully upgrade to PostgreSQL 17 using pg_upgrade. The test now validates: - Each PG 15 extension version can...

jfroche

## What kind of change does this PR introduce? supautils update ## What is the current behavior? deadlock_timeout is not configurable ## What is the new behavior? Allow users to...

TheOtherBrian1

fix(setup-postgres.yml): fix missing initdb calls

1

## What kind of change does this PR introduce? updates initdb calls with checksum flag ## What is the current behavior? missing calls from ansible playbook with checksum flag ##...

jchancojr

## What kind of change does this PR introduce? Updates the Nix Directory Structure documentation. ## What is the current behavior? Closes #1957 The current doc says there exists default.nix...

VirenderNayal

feat: link pgbouncer and postgresql ports in fail2ban jails

2

Configure fail2ban to ban both pgbouncer and postgresql ports when either service detects authentication failures. This prevents attackers from bypassing bans by switching between connection methods.

jose-ledesma