{
  "module": "postgres",
  "version": "1",

  "provides": [{"name": "postgres-database", "scope": "mesh"}],
  "capabilities": ["container-runtime"],

  "listens": [
    {"port": 5432, "protocol": "tcp", "from": "mesh",
     "why": "modules on any machine that were granted a database"}
  ],

  "serves": {
    "postgres-database": {"port": 5432}
  },

  "receives": {"postgres-database": "/var/lib/postgres/grants/mesh.json"},
  "grants": {"postgres-database": "/var/lib/postgres/grants"},

  "own-secrets": {"superuser": "/var/lib/postgres/superuser.env"},

  "resources": [
    {"id": "state", "type": "directory", "path": "/var/lib/postgres", "mode": "0700"},
    {"id": "grants", "type": "directory", "path": "/var/lib/postgres/grants", "mode": "0700"},

    {"id": "net", "type": "network", "name": "postgres"},

    {"id": "server", "type": "container", "name": "postgres",
     "image": "postgres@sha256:0000000000000000000000000000000000000000000000000000000000000000",
     "network": "postgres",
     "env": {"POSTGRES_USER": "postgres", "POSTGRES_DB": "postgres"},
     "env-file": ["/var/lib/postgres/superuser.env"],
     "ports": ["5432:5432"],
     "volumes": ["/services/postgres/db-data:/var/lib/postgresql/data"]},

    {"id": "provisioner", "type": "container", "name": "mesh-provision-postgres",
     "image": "mesh-provision-postgres@sha256:0000000000000000000000000000000000000000000000000000000000000000",
     "network": "postgres",
     "env": {
       "GRANTS": "/var/lib/postgres/grants",
       "MESH_PROVISION_POSTGRES": "postgres://postgres@postgres:5432/postgres?sslmode=disable"
     },
     "env-file": ["/var/lib/postgres/superuser.env"],
     "volumes": [
       "/var/lib/postgres/grants:/var/lib/postgres/grants:ro",
       "/var/lib/postgres/superuser.env:/var/lib/postgres/superuser.env:ro"
     ],
     "restart-on": ["grants"]}
  ]
}