Merge branch 'main' into feat/grafana-postgresql

Author: stackptr

.github/workflows/ci.yml

@@ -49,3 +49,5 @@ jobs:
       run: |
         attic push rc:main ./result
         attic push rc:main $(which attic)
+        nix build .#devShells.${{ matrix.system }}.default -o ./result-devshell
+        attic push rc:main ./result-devshell

.github/workflows/deploy.yml

@@ -7,15 +7,14 @@ on:
     branches: [main]
   workflow_dispatch:
 
-concurrency:
-  group: deploy
-  cancel-in-progress: false
-
 jobs:
   deploy:
     if: >-
       github.event_name == 'workflow_dispatch' ||
       github.event.workflow_run.conclusion == 'success'
+    concurrency:
+      group: deploy-${{ matrix.host }}
+      cancel-in-progress: false
     strategy:
       matrix:
         include:

hosts/glyph/services/db.nix

@@ -12,7 +12,7 @@
       port = 5432;
       max_connections = 150;
     };
-    ensureDatabases = ["atticd" "grafana" "pocketid"];
+    ensureDatabases = ["atticd" "grafana" "open-webui" "pocketid"];
     ensureUsers = [
       {
         name = "atticd";
@@ -22,6 +22,10 @@
         name = "grafana";
         ensureDBOwnership = true;
       }
+      {
+        name = "open-webui";
+        ensureDBOwnership = true;
+      }
       {
         name = "pocketid";
         ensureDBOwnership = true;
@@ -31,6 +35,6 @@
 
   services.postgresqlBackup = {
     enable = true;
-    databases = ["atticd" "grafana" "pocketid"];
+    databases = ["atticd" "grafana" "open-webui" "pocketid"];
   };
 }

hosts/glyph/services/open-webui.nix

@@ -27,6 +27,7 @@
       OAUTH_ALLOWED_ROLES = "users, admins";
       OAUTH_ADMIN_ROLES = "admins";
       ENABLE_LOGIN_FORM = "false";
+      DATABASE_URL = "postgresql:///open-webui?host=/run/postgresql";
     };
   };
 }