postgres:
  enabled: True
  telegraf:
    retention_days: 14
    maintenance_max_age_hours: 3
  config:
    listen_addresses: '*'
    port: 5432
    max_connections: 100
    shared_buffers: 256MB
    ssl: 'on'
    ssl_cert_file: '/conf/postgres.crt'
    ssl_key_file: '/conf/postgres.key'
    ssl_ca_file: '/conf/ca.crt'
    hba_file: '/conf/pg_hba.conf'
    log_destination: 'stderr'
    logging_collector: 'off'
    log_min_messages: 'warning'
    shared_preload_libraries: pg_cron
    cron.database_name: postgres
    # pg_hba.conf only trusts local socket connections; over TCP pg_cron has no
    # password to send and every job fails to connect.
    cron.host: /run/postgresql