---
# The shared Postgres LXC created by src/shared/postgres/terraform (VMID 161,
# 192.168.50.54). Named for the container's hostname, which is how it appears
# in the API-backed dynamic inventory.
#
# This is the one app with no `db:` block, because it *is* the database — the
# per-app databases are created against it by whichever compose_stack /
# lxc_app / k3s_app run declares them, using homelab/shared/postgres as
# `admin_vault_path`.

# The address Terraform assigns this guest (build/config/terraform/main.tf).
# Pinned here rather than left to DNS: the API-backed dynamic inventory
# supplies no `ansible_host`, so without this Ansible SSHes to the bare
# inventory name and whatever the LAN's resolver happens to return. For
# `postgres` that resolver answers 192.168.50.53 — the *Unraid* Postgres
# container, a different instance of the same service — which fails as a
# connection refused rather than as anything that names the real problem.
# These addresses are hand-assigned from the 192.168.50.50-.59 band anyway,
# so restating one here duplicates nothing that was ever derived.
ansible_host: 192.168.50.54

apps:
  - name: postgres
    src: shared/postgres
    vault_path: homelab/shared/postgres
    # The packaging's umbrella unit, not postgresql@17-main — see
    # POSTGRES_SERVICE_NAME in src/shared/postgres/ansible/proxmox/vars.yml.
    service_name: postgresql