nixos/odoo: disable the database manager by default (#485310)

nixos/modules/services/finance/odoo.nix

@@ -103,6 +103,9 @@ in
       services.odoo.settings.options = {
         data_dir = "/var/lib/private/odoo/data";
         proxy_mode = cfg.domain != null;
+        # Disable the database manager by default
+        # https://www.odoo.com/documentation/master/administration/on_premise/deploy.html#database-manager-security
+        list_db = lib.mkDefault false;
       }
       // (lib.optionalAttrs (cfg.addons != [ ]) {
         addons_path = lib.concatMapStringsSep "," lib.escapeShellArg cfg.addons;

nixos/tests/odoo.nix

@@ -29,5 +29,6 @@
     server.wait_for_unit("odoo.service")
     server.wait_until_succeeds("curl -s http://localhost:8069/web/database/selector | grep '<title>Odoo</title>'")
     server.succeed("curl -s http://localhost/web/database/selector | grep '<title>Odoo</title>'")
+    server.succeed("curl http://localhost/web/database/manager | grep 'database manager has been disabled'")
   '';
 }