From 9174094e7411f7032ff963695a70efc82e5ea8ed Mon Sep 17 00:00:00 2001 From: Thomas Gerbet Date: Fri, 30 Jan 2026 13:42:12 +0100 Subject: [PATCH] nixos/odoo: disable the database manager by default Co-Authored-By: Nina Fromm --- nixos/modules/services/finance/odoo.nix | 3 +++ nixos/tests/odoo.nix | 1 + 2 files changed, 4 insertions(+) diff --git a/nixos/modules/services/finance/odoo.nix b/nixos/modules/services/finance/odoo.nix index 4395010fe7a0..0c0c581fa987 100644 --- a/nixos/modules/services/finance/odoo.nix +++ b/nixos/modules/services/finance/odoo.nix @@ -103,6 +103,9 @@ in services.odoo.settings.options = { data_dir = "/var/lib/private/odoo/data"; proxy_mode = cfg.domain != null; + # Disable the database manager by default + # https://www.odoo.com/documentation/master/administration/on_premise/deploy.html#database-manager-security + list_db = lib.mkDefault false; } // (lib.optionalAttrs (cfg.addons != [ ]) { addons_path = lib.concatMapStringsSep "," lib.escapeShellArg cfg.addons; diff --git a/nixos/tests/odoo.nix b/nixos/tests/odoo.nix index a36a7a5b9801..8bc768d13e92 100644 --- a/nixos/tests/odoo.nix +++ b/nixos/tests/odoo.nix @@ -29,5 +29,6 @@ server.wait_for_unit("odoo.service") server.wait_until_succeeds("curl -s http://localhost:8069/web/database/selector | grep 'Odoo'") server.succeed("curl -s http://localhost/web/database/selector | grep 'Odoo'") + server.succeed("curl http://localhost/web/database/manager | grep 'database manager has been disabled'") ''; }