diff --git a/ansible/files/postgresql_config/postgresql.service.j2 b/ansible/files/postgresql_config/postgresql.service.j2 index c056ac433..beb7bbf76 100644 --- a/ansible/files/postgresql_config/postgresql.service.j2 +++ b/ansible/files/postgresql_config/postgresql.service.j2 @@ -21,5 +21,9 @@ RestartSec=5 OOMScoreAdjust=-1000 EnvironmentFile=-/etc/environment.d/postgresql.env LimitNOFILE=16384 +{% if supabase_internal is defined %} +IPAddressDeny=localhost +IPAddressAllow=127.0.0.53/32 +{% endif %} [Install] WantedBy=multi-user.target diff --git a/ansible/vars.yml b/ansible/vars.yml index 4d30bc23d..b203c07d4 100644 --- a/ansible/vars.yml +++ b/ansible/vars.yml @@ -8,8 +8,8 @@ postgres_major: # Full version strings for each major version postgres_release: - postgresorioledb-17: "17.0.1.039-orioledb" - postgres15: "15.8.1.045" + postgresorioledb-17: "17.0.1.040-orioledb_socket" + postgres15: "15.8.1.046-socket" # Non Postgres Extensions pgbouncer_release: "1.19.0" diff --git a/testinfra/test_ami_nix.py b/testinfra/test_ami_nix.py index 4d354fac3..e954d0fa5 100644 --- a/testinfra/test_ami_nix.py +++ b/testinfra/test_ami_nix.py @@ -106,7 +106,7 @@ "0000000000000000000000000000000000000000000000000000000000000000" ) postgrest_base_conf_content = """ -db-uri = "postgres://authenticator:postgres@localhost:5432/postgres?application_name=postgrest" +db-uri = "postgres://authenticator:postgres@/postgres?host=/var/run/postgresql/&application_name=postgrest" db-schema = "public, storage, graphql_public" db-anon-role = "anon" jwt-secret = "my_jwt_secret_which_is_not_so_secret" @@ -124,7 +124,7 @@ GOTRUE_API_HOST=0.0.0.0 GOTRUE_SITE_URL= GOTRUE_DB_DRIVER=postgres -GOTRUE_DB_DATABASE_URL=postgres://supabase_auth_admin@localhost/postgres?sslmode=disable +GOTRUE_DB_DATABASE_URL=postgres://supabase_auth_admin@/postgres?host=/var/run/postgresql/&sslmode=disable GOTRUE_JWT_ADMIN_ROLES=supabase_admin,service_role GOTRUE_JWT_AUD=authenticated GOTRUE_JWT_SECRET=my_jwt_secret_which_is_not_so_secret