{ config, lib, pkgs, ... }:
{
  services.postgresql = {
    enable = true;

    ensureDatabases = [ "vaultwarden" ];
    authentication = pkgs.lib.mkOverride 10 ''
      #type database  DBuser  auth-method
      local all       all     trust
    '';

    # When removing users or removing permissions from users here, must also remove them manually
    ensureUsers = [
      {
        name = "vaultwarden";
        ensureDBOwnership = true; 
      }
    ];

    
    settings = {
      port = 5432;
    };
  };
}