# sql

Central configuration database — the "single point of config" backing Keycloak, Gitea, and other stacks that need a relational store. **Cloud-only stack.**

- **Network**: `data` only (no internet egress)
- **Engine**: stub uses **postgres:16-alpine** pending decision (postgres vs mariadb vs mysql)
- **Volume**: `sql-data`
- **TODO**:
  - confirm engine choice (likely postgres for keycloak + gitea compatibility)
  - per-app database/role provisioning (init scripts in `config/init.d/`)
  - backup strategy (pg_dump cron sidecar vs streaming replica)