nixos-server/services/postgres.nix

{ pkgs, ... }: {
  name = "postgres";
  config = {
    services.postgresql = {
      enable = true;
      enableTCPIP = true;
      port = 3306;
      ensureDatabases = [ "gitea" ];
      ensureUsers = [{
        name = "gitea";
        ensureDBOwnership = true;
      }];
      authentication = ''
        host  all      all     10.10.0.0/16   trust
      '';
    };
  };
  ports = {
    tcp = [ 3306 ];
    udp = [];
    http = null;
  };
  hosts = [ ];
  volumes = [{
    name = "postgres-storage";
    mountPoint = "/var/lib/postgresql";
  }];
}