PostgreSQL

services:
  postgres:
    image: "ghcr.io/daemonless/postgres:latest"
    container_name: postgres
    environment:
      - POSTGRES_USER=postgres  # Database superuser name (default: postgres)
      - POSTGRES_PASSWORD=postgres  # Database superuser password
      - POSTGRES_DB=postgres  # Default database to create (default: same as user)
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - POSTGRES_INITDB_ARGS=  # Additional arguments for initdb
      - POSTGRES_HOST_AUTH_METHOD=  # Authentication method (default: scram-sha-256)
    volumes:
      - "/containers/postgres:/var/lib/postgresql/data"
    ports:
      - "5432:5432"
    annotations:
      org.freebsd.jail.allow.sysvipc: "true"
    # always (not unless-stopped) so FreeBSD's podman rc.d auto-starts it at boot
    restart: always

# .env

DIRECTOR_PROJECT=postgres
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=postgres
PUID=1000
PGID=1000
TZ=UTC
POSTGRES_INITDB_ARGS=
POSTGRES_HOST_AUTH_METHOD=

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  postgres:
    name: postgres
    options:
      - container: 'args:--pull'
      - expose: '5432:5432 proto:tcp'
      - template: !ENV '${PWD}/template.conf'
    oci:
      user: root
      environment:
        - POSTGRES_USER: !ENV '${POSTGRES_USER}'
        - POSTGRES_PASSWORD: !ENV '${POSTGRES_PASSWORD}'
        - POSTGRES_DB: !ENV '${POSTGRES_DB}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - POSTGRES_INITDB_ARGS: !ENV '${POSTGRES_INITDB_ARGS}'
        - POSTGRES_HOST_AUTH_METHOD: !ENV '${POSTGRES_HOST_AUTH_METHOD}'
    volumes:
      - POSTGRES_DATA_PATH: /var/lib/postgresql/data
volumes:
  POSTGRES_DATA_PATH:
    device: '/containers/postgres'

# Makejail

ARG tag=latest

OPTION container=boot
OPTION overwrite=force
OPTION from=ghcr.io/daemonless/postgres:${tag}

# template.conf

exec.start: "/bin/sh /etc/rc"
exec.stop: "/bin/sh /etc/rc.shutdown jail"
mount.devfs
persist
allow.sysvipc

services:
  postgres:
    name: postgres
    image: "ghcr.io/daemonless/postgres:latest"
    network:
      - mode: host
    environment:
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=postgres
      - POSTGRES_DB=postgres
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - POSTGRES_INITDB_ARGS=
      - POSTGRES_HOST_AUTH_METHOD=
    volumes:
      - "/containers/postgres:/var/lib/postgresql/data"