allow root to log in as any user locally

2023-09-25 13:06:06 -05:00 · 2023-09-25 13:06:06 -05:00 · 8e09451dee
commit 8e09451dee
parent 7c6222cbc9
1 changed files with 12 additions and 4 deletions
--- a/flake.nix
+++ b/flake.nix
@ -537,10 +537,18 @@
                      hostnossl replication all all reject
                      hostssl   replication all all scram-sha-256
                    '';
-                    identFile = pkgs.writeTextDir "pg_ident.conf" ''
+                    identFile = pkgs.writeTextDir "pg_ident.conf" (
+                      ''
                        default root     postgres
                        default postgres postgres
-                    '';
+                      '' + (lib.strings.concatStringsSep "\n"
+                        (
+                          map
+                            (user: "default root ${user.username}")
+                            cfg.users
+                        )
+                      )
+                    );
                    archiveCommand = "${pgbackrest}/bin/pgbackrest archive-push %p";
                    settings = {
                      bgwriter_flush_after = "512kB";