{ config, lib, pkgs, ... }:
{
  services.postgresql = {
    enable = true;

    ensureDatabases = [ "vaultwarden" "hedgedoc" "forgejo" ];
    authentication = pkgs.lib.mkOverride 10 ''
      #type database  DBuser  IP Range         auth-method
      local all       all                      trust
      host  all       all     ::1/128          trust
      host  all       all     127.0.0.1/32     trust
    '';

    # When removing users or removing permissions from users here, must also remove them manually
    ensureUsers = [
      {
        name = "vaultwarden";
        ensureDBOwnership = true; 
      }
      {
        name = "hedgedoc";
        ensureDBOwnership = true; 
      }
    ];
    
    settings = {
      port = 5432;
    };

  };
}