up

Signed-off-by: Christoph Schmatzler <christoph@schmatzler.com>

modules/nixos/default.nix

@@ -8,6 +8,7 @@
 }: {
   imports = [
     ../core.nix
+    ../postgresql.nix
     ./firewall.nix
     ./ssh.nix
     ./adguard.nix

modules/postgresql.nix

@@ -0,0 +1,34 @@
+{
+  config,
+  lib,
+  pkgs,
+  user,
+  ...
+}: {
+  config = lib.mkIf config.services.postgresql.enable {
+    services.postgresql = {
+      package = pkgs.postgresql_17;
+      enableTCPIP = true;
+      settings.port = 5432;
+      ensureDatabases = ["postgres"];
+      ensureUsers = [
+        {
+          name = "postgres";
+          ensureDBOwnership = true;
+        }
+        {
+          name = user;
+          ensureClauses = {
+            superuser = true;
+            createdb = true;
+          };
+        }
+      ];
+      authentication = ''
+        local all all trust
+        host  all all 127.0.0.1/32 trust
+        host  all all ::1/128 trust
+      '';
+    };
+  };
+}