PostgreSQL

services:
  postgres:
    image: "ghcr.io/daemonless/postgres:latest"
    container_name: postgres
    environment:
      - POSTGRES_USER=postgres  # Database superuser name (default: postgres)
      - POSTGRES_PASSWORD=postgres  # Database superuser password
      - POSTGRES_DB=postgres  # Default database to create (default: same as user)
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - POSTGRES_INITDB_ARGS=  # Additional arguments for initdb
      - POSTGRES_HOST_AUTH_METHOD=  # Authentication method (default: scram-sha-256)
    volumes:
      - "/path/to/containers/postgres:/var/lib/postgresql/data"
    ports:
      - "5432:5432"
    annotations:
      org.freebsd.jail.allow.sysvipc: "true"
    # always (not unless-stopped) so FreeBSD's podman rc.d auto-starts it at boot
    restart: always

podman run -d --name postgres \
  -p 5432:5432 \
  --annotation 'org.freebsd.jail.allow.sysvipc=true' \
  -e POSTGRES_USER=postgres \
  -e POSTGRES_PASSWORD=postgres \
  -e POSTGRES_DB=postgres \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=UTC \
  -e POSTGRES_INITDB_ARGS= \
  -e POSTGRES_HOST_AUTH_METHOD= \
  -v /path/to/containers/postgres:/var/lib/postgresql/data \
  ghcr.io/daemonless/postgres:latest

- name: Deploy postgres
  containers.podman.podman_container:
    name: postgres
    image: "ghcr.io/daemonless/postgres:latest"
    state: started
    restart_policy: always
    env:
      POSTGRES_USER: "postgres"
      POSTGRES_PASSWORD: "postgres"
      POSTGRES_DB: "postgres"
      PUID: "1000"
      PGID: "1000"
      TZ: "UTC"
      POSTGRES_INITDB_ARGS: ""
      POSTGRES_HOST_AUTH_METHOD: ""
    ports:
      - "5432:5432"
    volumes:
      - "/path/to/containers/postgres:/var/lib/postgresql/data"
    annotation:
      org.freebsd.jail.allow.sysvipc: "true"

# .env

DIRECTOR_PROJECT=postgres
POSTGRES_USER=postgres
POSTGRES_PASSWORD=postgres
POSTGRES_DB=postgres
PUID=1000
PGID=1000
TZ=UTC
POSTGRES_INITDB_ARGS=
POSTGRES_HOST_AUTH_METHOD=

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  postgres:
    name: postgres
    options:
      - container: 'boot args:--pull'
      - expose: '5432:5432 proto:tcp'
    oci:
      user: root
      environment:
        - POSTGRES_USER: !ENV '${POSTGRES_USER}'
        - POSTGRES_PASSWORD: !ENV '${POSTGRES_PASSWORD}'
        - POSTGRES_DB: !ENV '${POSTGRES_DB}'
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - POSTGRES_INITDB_ARGS: !ENV '${POSTGRES_INITDB_ARGS}'
        - POSTGRES_HOST_AUTH_METHOD: !ENV '${POSTGRES_HOST_AUTH_METHOD}'
    volumes:
      - POSTGRES_DATA_PATH: /var/lib/postgresql/data
volumes:
  POSTGRES_DATA_PATH:
    device: '/path/to/containers/postgres'

# Makejail

ARG tag=latest

OPTION overwrite=force
OPTION from=ghcr.io/daemonless/postgres:${tag}
SET allow.sysvipc=1

appjail oci run -Pd \
  -o overwrite=force \
  -o container="args:--pull" \
  -o virtualnet=":<random> default" \
  -o nat \
  -o expose="5432:5432 proto:tcp" \
  -e POSTGRES_USER=postgres \
  -e POSTGRES_PASSWORD=postgres \
  -e POSTGRES_DB=postgres \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=UTC \
  -e POSTGRES_INITDB_ARGS= \
  -e POSTGRES_HOST_AUTH_METHOD= \
  -o fstab="/path/to/containers/postgres /var/lib/postgresql/data <pseudofs>" \
  ghcr.io/daemonless/postgres:latest postgres