gengar

mjm.postgresql.enable = true;
mjm.postgresql.spiffe.enable = true;

gengar is the single PostgreSQL server shared by various microVMs running on apollo. VMs will find it via Consul and connect over mTLS, using SPIFFE certs to authenticate.

services.postgresql.package = pkgs.postgresql_18;

I require all machines running PostgreSQL to manually specify their version rather than rely on state version. At time of writing, 18 is the most recent stable major version.

microvm.vcpu = 2;
microvm.mem = 2048;

gengar is given an extra CPU and extra RAM to always be able to handle the needs of the various database clients it serves.

{ pkgs, ... }: {
  microvm.vms.gengar.config = {
    <<config>>

    mjm.profiles.microvm = {
      enable = true;
      macAddress = "02:2d:8c:60:c2:bb";
      machineId = "1a4db1f97a304d9a9797bbe10ff0ff05";
      group = "early";
    };
    microvm.vsock.cid = 194;
    system.stateVersion = "26.11";
  };
}