Commit graph

7 commits

Author SHA1 Message Date
Peter Jones
66525b8df1
Account managers services should be "oneshot"
Making these services "oneshot" services means that other services
will wait for them to finish.
2019-06-20 12:02:49 -07:00
Peter Jones
9547da5974
PostgreSQL: Correctly set database owner and schema object owner
Also, grant permission to create schema objects when given "rw"
abilities.
2019-06-18 12:54:16 -07:00
Peter Jones
b2fd566c36
Breaking Change: Completely Change PostgreSQL Account Management
This is a breaking change that will require you to change your Phoebe
settings for PostgreSQL.

  * New database configuration options

  * Accounts no longer automatically create databases

  * Databases have `owners' that tie them back to an account

  * Databases have `users' that grant accounts full access

  * Databases have `readers' that grant read-only access to accounts

  * Accounts can use `ident' authentication for local connections if
    you enable the `allowIdent' option.

  * Existing accounts that are not configured via Phoebe will be
    locked so they cannot be used.  That way if you delete a user from
    Phoebe the account will continue to exist, but won't have access
    to anything.
2019-04-30 08:12:06 -07:00
Peter Jones
c45f05c96c
New service: InfluxDB 2019-02-20 11:26:32 -07:00
Peter Jones
193b82189e
Automatically depending on NixOps key services, new Rails sourcedFile option
* Services that need password files will automatically depend on the
    appropriate NixOps key service as necessary.

  * New `sourcedFile` option for Rails applications to load a Bash
    script just before starting the Rails service.  Useful for setting
    secret environment variables.
2019-01-03 14:33:38 -07:00
Peter Jones
9745341307
postgresql: Add option to give a user the SUPERUSER permission
This is necessary for databases used to test Ruby on Rails
applications :(
2018-12-20 16:53:34 -07:00
Peter Jones
3980c37fa0
security, rails, postgresql: Import files from original repo 2018-12-19 16:08:03 -07:00