{ pkgs, ... }: 
{
  services.postgresql = {
    enable = true;
    ensureUsers = [
      {
        name = "forgejo";
        ensurePermissions = {
          "DATABASE \"forgejo\"" = "ALL PRIVILEGES";
        };
      }
    ];
    ensureDatabases = [
      "forgejo"
    ];
  };
}