overthinkos/postgresql

postgresql -- PostgreSQL database server

Layer Properties

| Property | Value | |----------|-------| | Dependencies | none | | Ports | 5432 | | Volumes | pgdata -> ~/.postgresql/data | | Service | postgresql (supervisord, priority 10) | | Install files | task: |

Environment Variables

| Variable | Value | |----------|-------| | PGDATA | ~/.postgresql/data | | POSTGRES_HOST_AUTH_METHOD | scram-sha-256 | | POSTGRES_SHARED_PRELOAD_LIBRARIES | (optional) — comma-separated .so names loaded at startup |

The entrypoint also reads these variables (with defaults, not set in layer.yml):

• POSTGRES_USER (default: postgres) — set by consuming layers (e.g., immich sets immich)
• POSTGRES_DB (default: $POSTGRES_USER) — set by consuming layers
• POSTGRES_PASSWORD — required unless POSTGRES_HOST_AUTH_METHOD=trust

Service Environment (injected into other containers)

| Variable | Template Value | Resolved Example | |----------|---------------|-----------------| | PGHOST | {{.ContainerName}} | ov-postgresql | | PGPORT | 5432 | 5432 |

Pod-aware: same-container consumers receive PGHOST=localhost, cross-container consumers receive PGHOST=ov-postgresql. When ov config runs, these are automatically injected into the global deploy.yml env for PostgreSQL service discovery.

See /ov-image:layer for env_provides field docs.

Packages

The layer is multi-distro:

• RPM (Fedora): postgresql-server, postgresql-contrib, pgvector (vector similarity search extension)
• PAC (Arch/CachyOS): postgresql, postgresql-libs — the Arch postgresql package ships the server + contrib tooling; pgvector on Arch is built from the AUR (see /ov-infrastructure:vectorchord).

Usage

# image.yml -- typically used as dependency of immich
my-image:
  layers:
    - postgresql

Used In Images

• /ov-immich:immich
• /ov-immich:immich-ml

Entrypoint Features

The custom entrypoint (/usr/local/bin/postgresql-entrypoint.sh) supports:

• First-run initialization — initdb, database creation, and /docker-entrypoint-initdb.d/ scripts
• Password management — POSTGRES_PASSWORD or POSTGRES_PASSWORD_FILE
• POSTGRES_SHARED_PRELOAD_LIBRARIES — when set, adds -c shared_preload_libraries=... to both the init-phase temp server and the final exec. Used by the vectorchord layer to load vchord.so. Generic mechanism — any extension layer can use it.

Related Layers

• /ov-immich:immich -- primary consumer (depends on postgresql)
• /ov-infrastructure:vectorchord -- sets POSTGRES_SHARED_PRELOAD_LIBRARIES=vchord.so
• /ov-infrastructure:redis -- often paired with postgresql in service stacks

Related Commands

• /ov-core:ov-config — Deploy with secrets provisioning (db-password)
• /ov-build:secrets — Manage database credentials

When to Use This Skill

Use when the user asks about:

• PostgreSQL database setup in containers
• pgvector extension
• Database volume or PGDATA configuration
• Port 5432 service
• Database initialization

Related

• /ov-eval:eval — declarative testing (eval: block, ov eval image, ov eval live)