compose.yaml, secrets.yaml, .sops.yaml flake.nix

compose.yaml

@@ -0,0 +1,23 @@
+# compose.yaml
+version: '3.9'
+
+services:
+  postgres:
+    image: postgres:17-alpine
+
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB}
+
+    ports:
+      - "5432:5432"
+
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+      
+    restart: unless-stopped
+
+volumes:
+  postgres_data:
+    driver: local