feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102) #4

2026-06-11T15:56:28+02:00

l.kirchner commented

2026-06-11 15:56:28 +02:00

Begleit-PR zu nexus-hub K-102.

ct/nexus-db.sh + install/nexus-db-install.sh nach webapp-Pattern
PGDG-Repo, DB nexus mit Least-Privilege-Rolle, pg_hba-Allowlist nur für den nexus-LXC (explizites reject sonst), pgvector vom Installer angelegt
idempotent; Credentials/DSN in /root/nexus-db.credentials
Codex-Review-Fixes: build.func-Source, Input-Validierung, Passwort-Rotation als Recovery

Anlegen nach Merge (auf PVE):
bash -c "$(curl -fsSL https://gitea.luki-net.org/luki-net/proxmox-scripts/raw/branch/main/ct/nexus-db.sh)"

Begleit-PR zu nexus-hub K-102. - ct/nexus-db.sh + install/nexus-db-install.sh nach webapp-Pattern - PGDG-Repo, DB nexus mit Least-Privilege-Rolle, pg_hba-Allowlist nur für den nexus-LXC (explizites reject sonst), pgvector vom Installer angelegt - idempotent; Credentials/DSN in /root/nexus-db.credentials - Codex-Review-Fixes: build.func-Source, Input-Validierung, Passwort-Rotation als Recovery Anlegen nach Merge (auf PVE): bash -c "$(curl -fsSL https://gitea.luki-net.org/luki-net/proxmox-scripts/raw/branch/main/ct/nexus-db.sh)"

l.kirchner added 2 commits 2026-06-11 15:56:28 +02:00

feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102) 0ee7ceae55

webapp-pattern ct/install pair: PGDG repo, database nexus with
least-privilege owner role, pg_hba allowlist restricted to the nexus
app LXC (explicit reject for everything else), pgvector created by the
installer, credentials/DSN summary in /root/nexus-db.credentials.
Idempotent re-runs keep role/db and do not rotate the password.

fix(nexus-db): cross-review findings 559ad8dc2d

- source build.func (script was unrunnable without it)
- validate DB_NAME/DB_USER/DB_PORT/NEXUS_APP_IP before SQL/pg_hba use
- rotate password when role exists but credentials file is missing

l.kirchner merged commit e8bace387d into main

2026-06-11 16:36:30 +02:00

l.kirchner deleted branch k102/nexus-db

2026-06-11 16:36:30 +02:00

l.kirchner referenced this issue from a commit

2026-06-11 16:36:32 +02:00

Merge pull request 'feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102)' (#4) from k102/nexus-db into main

l.kirchner referenced this pull request

2026-06-12 14:59:36 +02:00

feat: allgemeiner instanzweiter Actions-Runner-LXC (Label homelab, ohne Deploy-Rechte) #6

Sign in to join this conversation.