{pkgs, ...}: {
  services.postgresql = {
    enable = true;
    ensureUsers = [
      {
        name = "forgejo";
        # ensurePermissions = {
        #   "DATABASE \"forgejo\"" = "ALL PRIVILEGES";
        # };
        ensureDBOwnership = true;
      }
    ];
    ensureDatabases = [
      "forgejo"
      "catpad"
    ];
  };
}