feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102) #4

Merged

l.kirchner merged 2 commits from k102/nexus-db into main

2026-06-11 16:36:30 +02:00

Author	SHA1	Message	Date
l.kirchner	559ad8dc2d	fix(nexus-db): cross-review findings - source build.func (script was unrunnable without it) - validate DB_NAME/DB_USER/DB_PORT/NEXUS_APP_IP before SQL/pg_hba use - rotate password when role exists but credentials file is missing	2026-06-11 15:56:05 +02:00
l.kirchner	0ee7ceae55	feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102) webapp-pattern ct/install pair: PGDG repo, database nexus with least-privilege owner role, pg_hba allowlist restricted to the nexus app LXC (explicit reject for everything else), pgvector created by the installer, credentials/DSN summary in /root/nexus-db.credentials. Idempotent re-runs keep role/db and do not rotate the password.	2026-06-11 15:51:04 +02:00

Author

SHA1

Message

Date

l.kirchner

559ad8dc2d

fix(nexus-db): cross-review findings

- source build.func (script was unrunnable without it)
- validate DB_NAME/DB_USER/DB_PORT/NEXUS_APP_IP before SQL/pg_hba use
- rotate password when role exists but credentials file is missing

2026-06-11 15:56:05 +02:00

l.kirchner

0ee7ceae55

feat(nexus-db): PostgreSQL 16 + pgvector LXC template (nexus-hub K-102)

webapp-pattern ct/install pair: PGDG repo, database nexus with
least-privilege owner role, pg_hba allowlist restricted to the nexus
app LXC (explicit reject for everything else), pgvector created by the
installer, credentials/DSN summary in /root/nexus-db.credentials.
Idempotent re-runs keep role/db and do not rotate the password.

2026-06-11 15:51:04 +02:00