database

const (
	PostgresPasswordEnvKey   = "postgres_password"
	MySQLPasswordEnvKey      = "mysql_password"
	MongoPasswordEnvKey      = "mongo_password"
	MariaDBPasswordEnvKey    = "mariadb_password"
	ClickHousePasswordEnvKey = "clickhouse_password"
)

PostgresPasswordEnvKey, MySQLPasswordEnvKey, MongoPasswordEnvKey are the internal/secrets envKeys each engine's generated password is stored under, keyed by the database's own name as the secrets manager's "serviceName" (cmd/levelrail's postgresCredentialsFor and its two siblings). Exported and centralized here, not left as unexported consts in cmd/levelrail, so internal/deploy and internal/reconcile/application can resolve a { from: ... } env var's password against the exact same keys those credential generators already write, with no second copy of the string literals to drift.

const (
	TLSCertEnvKey = "tls_cert"
	TLSKeyEnvKey  = "tls_key"
)

TLSCertEnvKey, TLSKeyEnvKey are the internal/secrets envKeys a TLS-capable database's generated certificate and private key are stored under (cmd/levelrail's tlsMaterialFor), the same per-database keying PostgresPasswordEnvKey and its siblings already establish. Exported so internal/reconcile/application and internal/api can check whether TLS material exists for a given database without importing cmd/levelrail.

const (
	// EnvMinSafeAgentVersion is the first agent release that reports every
	// field the database drift checks compare (container labels).
	EnvMinSafeAgentVersion = "APP_AGENT_MIN_SAFE_VERSION"

	// ConditionTypeAgentCompatible is the extra condition set while a
	// database's node runs an agent too old for safe drift decisions.
	ConditionTypeAgentCompatible = "AgentCompatible"
)

const (
	EnvPoolerImage           = "APP_PG_POOLER_IMAGE"
	EnvPoolerDefaultPoolSize = "APP_PG_POOLER_DEFAULT_POOL_SIZE"
	EnvPoolerMaxClientConn   = "APP_PG_POOLER_MAX_CLIENT_CONN"
)

Env knobs for the managed Postgres pooler. The image falls back to a pinned default; operators override it with a tag or digest they have vetted.

const (
	EnvDockerWaitInterval = "APP_DB_DOCKER_WAIT_INTERVAL"
	EnvReadyProbeInterval = "APP_DB_READY_PROBE_INTERVAL"
	EnvReadyTimeout       = "APP_DB_READY_TIMEOUT"
)

Environment variables for the waiting steps of creating a database.

const (
	EnvRecreateLimit       = "APP_DB_RECREATE_LIMIT"
	EnvRecreateWindow      = "APP_DB_RECREATE_WINDOW"
	EnvRecreateBackoffBase = "APP_DB_RECREATE_BACKOFF_BASE"
	EnvRecreateBackoffMax  = "APP_DB_RECREATE_BACKOFF_MAX"
)

Env knobs for the recreate loop guard. A replace beyond the limit inside the window is delayed with an exponential backoff instead of repeating forever.

const (
	MeilisearchAPIKeyEnvKey = "meilisearch_master_key"
	QdrantAPIKeyEnvKey      = "qdrant_api_key"
	TypesenseAPIKeyEnvKey   = "typesense_api_key"
)

Secrets envKeys each engine's generated API key is stored under.

const (
	RestorePendingName   = ".restore-pending"
	RestoreImportingName = ".restore-importing"
	RestorePreviousName  = ".restore-previous"
	RestoreStagingName   = ".restore-staging"
	RestoreRollbackName  = ".restore-rollback"
	RestoreBootsName     = ".restore-boots"
)

Restore staging names inside an engine's volume, shared with internal/backup. Only an explicit rollback marker restores the previous data: an unconfirmed restore is never rolled back silently on a reboot.

const (
	PgvectorSuffix    = "-pgvector"
	TimescaleDBSuffix = "-timescaledb"
	PostGISSuffix     = "-postgis"
)

Suffixes that mark a Postgres version running an extension image, for example "17-pgvector" runs pgvector/pgvector:pg17. The engine id stays "postgres" so every Postgres code path (dump, restore, health) applies unchanged.

const DefaultPoolerImage = "edoburu/pgbouncer:v1.26.1-p0"

DefaultPoolerImage is used when EnvPoolerImage is unset. It is pinned to an exact version and speaks the env contract poolerEnv writes.

const EnvBinlogExpireSeconds = "APP_PITR_BINLOG_EXPIRE_SECONDS"

EnvBinlogExpireSeconds bounds how long a database keeps closed binlog files locally; shipped copies in the backup target are pruned by base backup retention.

const EnvCrashLoopRestarts = "APP_DB_CRASH_LOOP_RESTARTS"

EnvCrashLoopRestarts is how many container restarts inside the ready window count as a crash loop.

const EnvDragonflyProactorThreads = "APP_DRAGONFLY_PROACTOR_THREADS"

EnvDragonflyProactorThreads caps Dragonfly's io threads (default: one per CPU). Dragonfly refuses to start when threads times 256MiB exceeds the memory available, which a many-core host with little RAM hits.

const MySQLBinlogBasename = "mysql-bin"

MySQLBinlogBasename is the log-bin prefix inside MySQLBinlogPath.

const MySQLBinlogPath = "/var/lib/mysql-binlog"

MySQLBinlogPath is where a PITR-enabled MySQL or MariaDB database mounts its binlog volume. The backup package reads the same path to ship closed files.

const MySQLSlowQueryLogPath = "/var/lib/mysql/slow-query.log"

MySQLSlowQueryLogPath is where mysqlCommand directs the slow query log inside the container's own writable data directory. Not the container's stdout/stderr: MySQL 8's FILE log sink cannot reliably open /dev/stderr (confirmed against a real container: "Could not use /dev/stderr for logging, error 2"), so internal/api's slow-queries handler execs into the container to read this file directly instead of going through the Docker log stream database_logs.go uses.

const PoolerConditionType = "PoolerReady"

PoolerConditionType is reported next to Ready so a broken pooler never marks the database itself as down.

const PoolerPort = 6432

PoolerPort is where the pooler listens. It shares the database's network namespace, so it must not collide with Postgres' own 5432.