about summary refs log tree commit diff
path: root/nixos/doc/manual
diff options
context:
space:
mode:
authorMaximilian Bosch <maximilian@mbosch.me>2024-02-09 23:31:06 +0100
committerMaximilian Bosch <maximilian@mbosch.me>2024-02-12 21:10:33 +0100
commitd363f526259bb22416d885e244c89061515d0b23 (patch)
tree0a71b762b35c37dfdc2d79995e59d4e615adfb92 /nixos/doc/manual
parent5a7b241264578c55cd25aa7422121aef072ce588 (diff)
downloadnixlib-d363f526259bb22416d885e244c89061515d0b23.tar
nixlib-d363f526259bb22416d885e244c89061515d0b23.tar.gz
nixlib-d363f526259bb22416d885e244c89061515d0b23.tar.bz2
nixlib-d363f526259bb22416d885e244c89061515d0b23.tar.lz
nixlib-d363f526259bb22416d885e244c89061515d0b23.tar.xz
nixlib-d363f526259bb22416d885e244c89061515d0b23.tar.zst
nixlib-d363f526259bb22416d885e244c89061515d0b23.zip
nixos/postgresql: drop ensurePermissions option
...effectively what was planned already in #266270, but it was too late
because the branches were restricted and didn't allow any breaking
changes anymore.

It also suffers from the same issue that we already had when discussing
this the last time[1] when `ensureDBOwnership` was ultimately introduced
as band-aid fix: newly created users don't get CREATE permission on
the `public` schema anymore (since psql 15), even with `ALL PRIVILEGES`.

If one's use-case is more sophisticated than having a single owner, it's
questionable anyways if this module is the correct tool since
permissions aren't dropped on a change to this option or a removal which
is pretty surprising in the context of NixOS.

[1] https://github.com/NixOS/nixpkgs/pull/266270
Diffstat (limited to 'nixos/doc/manual')
-rw-r--r--nixos/doc/manual/release-notes/rl-2405.section.md5
1 files changed, 5 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2405.section.md b/nixos/doc/manual/release-notes/rl-2405.section.md
index bbe59b002003..e2569f4d937c 100644
--- a/nixos/doc/manual/release-notes/rl-2405.section.md
+++ b/nixos/doc/manual/release-notes/rl-2405.section.md
@@ -91,6 +91,11 @@ The pre-existing [services.ankisyncd](#opt-services.ankisyncd.enable) has been m
   [v0.31](https://github.com/derailed/k9s/releases/tag/v0.31.0) for details. It is recommended
   to back up your current configuration and let k9s recreate the new base configuration.
 
+- The option `services.postgresql.ensureUsers._.ensurePermissions` has been removed as it's
+  not declarative and is broken with newer postgresql versions. Consider using
+  [](#opt-services.postgresql.ensureUsers._.ensureDBOwnership)
+  instead or a tool that's more suited for managing the data inside a postgresql database.
+
 - `idris2` was updated to v0.7.0. This version introduces breaking changes. Check out the [changelog](https://github.com/idris-lang/Idris2/blob/v0.7.0/CHANGELOG.md#v070) for details.
 
 - `neo4j` has been updated to 5, you may want to read the [release notes for Neo4j 5](https://neo4j.com/release-notes/database/neo4j-5/)