console/deployment/services/postgres.ts

import { parse } from 'pg-connection-string';
import * as pulumi from '@pulumi/pulumi';
import { ServiceSecret } from '../utils/secrets';

export class PostgresConnectionSecret extends ServiceSecret<{
  host: string | pulumi.Output<string>;
  port: string | pulumi.Output<string>;
  user: string | pulumi.Output<string>;
  password: string | pulumi.Output<string>;
  database: string | pulumi.Output<string>;
  ssl: '0' | '1' | pulumi.Output<'0' | '1'>;
  connectionString: pulumi.Output<string>;
  connectionStringPostgresql: pulumi.Output<string>;
}> {}

export function deployPostgres() {
  const postgresConfig = new pulumi.Config('postgres');
  const rawConnectionString = postgresConfig.requireSecret('connectionString');
  const connectionString = rawConnectionString.apply(rawConnectionString =>
    parse(rawConnectionString),
  );

  const secret = new PostgresConnectionSecret('postgres', {
    connectionString: rawConnectionString,
    connectionStringPostgresql: rawConnectionString.apply(str =>
      str.replace('postgres://', 'postgresql://'),
    ),
    host: connectionString.apply(connection => connection.host ?? ''),
    port: connectionString.apply(connection => connection.port || '5432'),
    user: connectionString.apply(connection => connection.user ?? ''),
    password: connectionString.apply(connection => connection.password ?? ''),
    database: connectionString.apply(connection => connection.database ?? ''),
    ssl: connectionString.apply(connection => (connection.ssl ? '1' : '0')),
  });

  return { secret };
}

export type Postgres = ReturnType<typeof deployPostgres>;