ci(release)!: v10

CHANGELOG.md

@@ -1,3 +1,69 @@
+## [10.0.0-beta.5](https://github.com/maevsi/maevsi_stack/compare/10.0.0-beta.4...10.0.0-beta.5) (2025-02-26)
+
+### Features
+
+* **postgres:** create roles in entrypoint ([c2be365](https://github.com/maevsi/maevsi_stack/commit/c2be365df2d69f819adc0b109964296753226ff2))
+
+### Bug Fixes
+
+* **maevsi-beta:** readd vio environment ([0573451](https://github.com/maevsi/maevsi_stack/commit/05734512145f9b9e1e9544cc374845977dcfa71c))
+
+## [10.0.0-beta.4](https://github.com/maevsi/maevsi_stack/compare/10.0.0-beta.3...10.0.0-beta.4) (2025-02-26)
+
+### Bug Fixes
+
+* **postgres:** enable logical replication ([3aff283](https://github.com/maevsi/maevsi_stack/commit/3aff283ebf0f12506db107605713a61b2f04739a))
+* **postgres:** mount entrypoint as file ([a2a29f4](https://github.com/maevsi/maevsi_stack/commit/a2a29f49c307a704ea4b1a7ed0fc9291a2cee304))
+
+## [10.0.0-beta.3](https://github.com/maevsi/maevsi_stack/compare/10.0.0-beta.2...10.0.0-beta.3) (2025-02-26)
+
+### Bug Fixes
+
+* **postgres:** use official postgis image ([5499f64](https://github.com/maevsi/maevsi_stack/commit/5499f64c68fb78ae0539ff36572cfeebcb6718cd))
+
+## [10.0.0-beta.2](https://github.com/maevsi/maevsi_stack/compare/10.0.0-beta.1...10.0.0-beta.2) (2025-02-26)
+
+### ⚠ BREAKING CHANGES
+
+* **postgres:** rename maevsi's role secret
+
+### Features
+
+* **postgres:** rename maevsi's role secret ([6ef446c](https://github.com/maevsi/maevsi_stack/commit/6ef446cdd9892433dc24d6cd763a118d28e59661))
+
+## [10.0.0-beta.1](https://github.com/maevsi/maevsi_stack/compare/9.1.2...10.0.0-beta.1) (2025-02-25)
+
+### ⚠ BREAKING CHANGES
+
+* **postgres:** switch from alpine to debian variant (#156)
+
+### Features
+
+* **postgres:** switch from alpine to debian variant ([#156](https://github.com/maevsi/maevsi_stack/issues/156)) ([2cf718c](https://github.com/maevsi/maevsi_stack/commit/2cf718c9d8880e7cbabdbc55177d0c8ec9f7080c))
+
+## [9.0.0-beta.3](https://github.com/maevsi/maevsi_stack/compare/9.0.0-beta.2...9.0.0-beta.3) (2025-02-04)
+
+### Bug Fixes
+
+* **postgraphile:** allow sentry cors headers ([220b0ae](https://github.com/maevsi/maevsi_stack/commit/220b0ae307a8235d8fc2031ba830421ee46e3860))
+* schedule release ([372be8f](https://github.com/maevsi/maevsi_stack/commit/372be8fdfc24c69bba50eafa747ac7cbb86bbc41))
+
+## [9.0.0-beta.2](https://github.com/maevsi/maevsi_stack/compare/9.0.0-beta.1...9.0.0-beta.2) (2025-01-25)
+
+### Features
+
+* **postgraphile:** append postgres plugin ([#158](https://github.com/maevsi/maevsi_stack/issues/158)) ([dc9def2](https://github.com/maevsi/maevsi_stack/commit/dc9def22c3b2093215c44ab417c5f2a229b8f937))
+
+## [9.0.0-beta.1](https://github.com/maevsi/maevsi_stack/compare/8.2.7...9.0.0-beta.1) (2025-01-18)
+
+### ⚠ BREAKING CHANGES
+
+* **postgres:** switch from alpine to debian variant (#156)
+
+### Features
+
+* **postgres:** switch from alpine to debian variant ([#156](https://github.com/maevsi/maevsi_stack/issues/156)) ([2cf718c](https://github.com/maevsi/maevsi_stack/commit/2cf718c9d8880e7cbabdbc55177d0c8ec9f7080c))
+
 ## [9.2.1](https://github.com/maevsi/maevsi_stack/compare/9.2.0...9.2.1) (2025-02-26)
 
 ### Bug Fixes

README.md

@@ -110,11 +110,11 @@ This project is deployed in accordance to the [DargStack template](https://githu
 
     The `maevsi_postgraphile` database role's username.
 
- - ### `postgres_role_maevsi-tusd_password`
+ - ### `postgres_role_maevsi_password`
 
     The `tusd` database role's password.
 
- - ### `postgres_role_maevsi-tusd_username`
+ - ### `postgres_role_maevsi_username`
 
     The `tusd` database role's password.
 

package.json

@@ -1,7 +1,7 @@
 {
   "name": "maevsi_stack",
   "private": true,
-  "version": "9.2.1",
+  "version": "10.0.0-beta.5",
   "description": "DargStack configuration for maevsi.",
   "repository": "https://github.com/maevsi/maevsi_stack.git",
   "author": "Jonas Thelemann <e-mail+maevsi_stack@jonas-thelemann.de>",

src/development/stack.yml

@@ -61,12 +61,12 @@ secrets:
   postgres_role_maevsi-postgraphile_username:
     # The `maevsi_postgraphile` database role's username.
     file: ./secrets/postgres/role_maevsi-postgraphile_username.secret
-  postgres_role_maevsi-tusd_password:
+  postgres_role_maevsi_password:
     # The `tusd` database role's password.
-    file: ./secrets/postgres/role_maevsi-tusd_password.secret
-  postgres_role_maevsi-tusd_username:
+    file: ./secrets/postgres/role_maevsi_password.secret
+  postgres_role_maevsi_username:
     # The `tusd` database role's password.
-    file: ./secrets/postgres/role_maevsi-tusd_username.secret
+    file: ./secrets/postgres/role_maevsi_username.secret
   postgres_user:
     # The database's default user.
     file: ./secrets/postgres/user.secret
@@ -211,9 +211,9 @@ services:
         target: /run/environment-variables/NUXT_TURNSTILE_SECRET_KEY
       - source: postgres_db
         target: /run/environment-variables/PGDATABASE
-      - source: postgres_role_maevsi-tusd_password
+      - source: postgres_role_maevsi_password
         target: /run/environment-variables/PGPASSWORD
-      - source: postgres_role_maevsi-tusd_username
+      - source: postgres_role_maevsi_username
         target: /run/environment-variables/PGUSER
     user: node:node # files created inside a docker container, like node_modules by pnpm, gain correct permissions by setting the user to `node`
     volumes:
@@ -319,13 +319,13 @@ services:
       - ../production/configurations/postgraphile/.postgraphilerc.js:/postgraphile/.postgraphilerc.js:ro
   postgres:
     # You can access the database via `adminer`.
-    command: -c maevsi.jwt_expiry_duration='1 month'
+    command: -c maevsi.jwt_expiry_duration='1 month' -c wal_level=logical
     environment:
       POSTGRES_ADDITIONAL_DBS: grafana
       POSTGRES_DB_FILE: /run/secrets/postgres_db
       POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
       POSTGRES_USER_FILE: /run/secrets/postgres_user
-    image: quay.io/debezium/postgres:17-alpine
+    image: postgis/postgis:17-3.5-alpine
     # # Expose ports (only) e.g. to generate a database graph image or similar.
     # ports:
     #   - 5432:5432
@@ -343,7 +343,7 @@ services:
     volumes:
       - /run/:/run/ # make PGSQL socket available # #DARGSTACK-REMOVE
       - postgres_data:/var/lib/postgresql/data/
-      - ../production/configurations/postgres/docker-entrypoint-initdb.d/:/docker-entrypoint-initdb.d/:ro
+      - ../production/configurations/postgres/docker-entrypoint-initdb.d/additional-databases.sh:/docker-entrypoint-initdb.d/additional-databases.sh:ro
   prometheus:
     # You can access the metrics monitoring at [prometheus.localhost](https://prometheus.localhost/).
     deploy:
@@ -400,8 +400,8 @@ services:
       - postgres_role_grafana_username
       - postgres_role_maevsi-postgraphile_password
       - postgres_role_maevsi-postgraphile_username
-      - postgres_role_maevsi-tusd_password
-      - postgres_role_maevsi-tusd_username
+      - postgres_role_maevsi_password
+      - postgres_role_maevsi_username
       - sqitch_target
     volumes:
       - ../../../sqitch/:/srv/app/

src/production/production.yml

@@ -89,9 +89,9 @@ services:
         target: /run/environment-variables/NUXT_TURNSTILE_SECRET_KEY
       - source: postgres_db
         target: /run/environment-variables/PGDATABASE
-      - source: postgres_role_maevsi-tusd_password
+      - source: postgres_role_maevsi_password
         target: /run/environment-variables/PGPASSWORD
-      - source: postgres_role_maevsi-tusd_username
+      - source: postgres_role_maevsi_username
         target: /run/environment-variables/PGUSER
     volumes:
       - ./configurations/postgraphile/jwtRS256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro