blumeops/pulumi
Erich Blume 248e118102 Add PostgreSQL and Miniflux services to tailnet
- Add postgresql ansible role (postgresql@18 via homebrew)
  - Creates miniflux database and user
  - Configures pg_hba.conf for local scram-sha-256 auth
  - Exposed via Tailscale at pg.tail8d86e.ts.net:5432

- Add miniflux ansible role (RSS/Atom feed reader)
  - Depends on postgresql role
  - Configures via /opt/homebrew/etc/miniflux.conf
  - Reads DB password from ~/.miniflux-db-password
  - Supports first-run admin creation via miniflux_create_admin flag
  - Exposed via Tailscale at feed.tail8d86e.ts.net

- Update Pulumi ACL tags (tag:pg, tag:feed)
- Update tailscale_serve role with new service definitions
- Update Alloy log collection for both services
- Update indri.yml playbook with new roles

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 07:26:59 -08:00
..
.gitignore Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
__main__.py Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
policy.hujson Add PostgreSQL and Miniflux services to tailnet 2026-01-16 07:26:59 -08:00
Pulumi.tail8d86e.yaml Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
Pulumi.yaml Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
pyproject.toml Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00