{ config, lib, pkgs, ... }:

{
  services.postgresql = {
    enable = true;
    enableTCPIP = true;
    ensureUsers = [
      {
        name = "audron";
        ensureClauses.superuser = true;
      }
      {
        name = "d3fus";
        ensureClauses.superuser = true;
      }
    ];
    authentication = pkgs.lib.mkOverride 10 ''
      #type database DBuser origin-address auth-method
      local all      all     trust
      # ipv4
      host  all      all     127.0.0.1/32   trust
      host  all      all     10.10.0.0/24   trust
      host  all      all     10.88.0.0/16   trust
      # ipv6
      host all       all     ::1/128        trust
    '';

    settings = {
      listen_addresses = lib.mkForce "127.0.0.1,10.10.0.1,::1";
    };
  };

  services.prometheus.exporters.postgres.enable = true;
}