{ config, lib, pkgs, ... }:

{
  services.postgresql = {
    enable = true;
    ensureDatabases = [ "quassel" "pdns" ];
    ensureUsers = [
      {
        name = "quassel";
        ensurePermissions = { "DATABASE quassel" = "ALL PRIVILEGES"; };
      }
      {
        name = "pdns";
        ensurePermissions = { "DATABASE pdns" = "ALL PRIVILEGES"; };
      }
      {
        name = "audron";
        ensureClauses.superuser = true;
      }
      {
        name = "d3fus";
        ensureClauses.superuser = true;
      }
    ];
    authentication = pkgs.lib.mkOverride 10 ''
      #type database DBuser origin-address auth-method
      local all      all     trust
    '';
  };
}