Erich Blume
ce1f696bd8
Phase 2 of documentation restructuring. Creates docs/reference/ with: Services (16): - alloy, argocd, borgmatic, 1password, forgejo, grafana - jellyfin, kiwix, loki, miniflux, navidrome, postgresql - prometheus, teslamate, transmission, zot Infrastructure (3): - hosts - Device inventory - tailscale - ACLs, groups, tags - routing - DNS domains and port mappings Kubernetes (2): - cluster - Minikube specs - apps - ArgoCD application registry Storage (2): - sifaka - Synology NAS configuration - backups - Backup policy All cards use wiki-links for cross-referencing and include YAML frontmatter with title and tags for Quartz. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
68 lines
1.7 KiB
Markdown
68 lines
1.7 KiB
Markdown
---
|
|
title: PostgreSQL
|
|
tags:
|
|
- service
|
|
- database
|
|
---
|
|
|
|
# PostgreSQL
|
|
|
|
Database cluster via CloudNativePG operator.
|
|
|
|
## Quick Reference
|
|
|
|
| Property | Value |
|
|
|----------|-------|
|
|
| **URL** | `tcp://pg.ops.eblu.me:5432` |
|
|
| **Metrics** | `http://cnpg-metrics.tail8d86e.ts.net:9187/metrics` |
|
|
| **Namespace** | `databases` |
|
|
| **Cluster** | `blumeops-pg` |
|
|
| **Operator** | CloudNativePG |
|
|
|
|
## Databases
|
|
|
|
| Database | Owner | Purpose |
|
|
|----------|-------|---------|
|
|
| miniflux | miniflux | [[miniflux\|Miniflux]] feed data |
|
|
| teslamate | teslamate | [[teslamate\|TeslaMate]] vehicle data |
|
|
|
|
## Users
|
|
|
|
| User | Role | Purpose |
|
|
|------|------|---------|
|
|
| postgres | superuser | CNPG internal |
|
|
| miniflux | app owner | Owns miniflux database |
|
|
| teslamate | superuser | TeslaMate (needs extensions) |
|
|
| eblume | superuser | Admin access |
|
|
| borgmatic | pg_read_all_data | [[borgmatic\|Backup]] access |
|
|
|
|
## Quick Connect
|
|
|
|
```bash
|
|
PGPASSWORD=$(op --vault blumeops item get <item-id> --fields password --reveal) \
|
|
psql -h pg.ops.eblu.me -U eblume -d miniflux
|
|
```
|
|
|
|
## Backup
|
|
|
|
Backed up via [[borgmatic\|Borgmatic]] `postgresql_databases` hook.
|
|
|
|
Borgmatic streams `pg_dump` directly to Borg (no intermediate files, no downtime).
|
|
|
|
## Credentials
|
|
|
|
**1Password items:**
|
|
- `guxu3j7ajhjyey6xxl2ovsl2ui` - eblume password
|
|
- `mw2bv5we7woicjza7hc6s44yvy` - borgmatic password
|
|
|
|
**CNPG-managed secrets:**
|
|
- `blumeops-pg-app` - miniflux user
|
|
- `blumeops-pg-eblume` - eblume superuser
|
|
- `blumeops-pg-borgmatic` - borgmatic backup user
|
|
- `blumeops-pg-teslamate` - teslamate user
|
|
|
|
## Related
|
|
|
|
- [[miniflux\|Miniflux]] - Feed reader database
|
|
- [[teslamate\|TeslaMate]] - Vehicle data database
|
|
- [[borgmatic\|Borgmatic]] - Database backup
|