1{ pkgs, ... }: {
 2  services.postgresql = {
 3    enable = true;
 4    enableTCPIP = true;
 5    settings = {
 6      listen_addresses = pkgs.lib.mkForce "0.0.0.0";
 7      port = pkgs.lib.mkForce 5432;
 8    };
 9    ensureDatabases = [ "orbismmo" ];
10    ensureUsers = [{
11      name = "orbismmo";
12      ensureDBOwnership = true;
13    }];
14    authentication = pkgs.lib.mkOverride 10 ''
15      local all       all     trust
16      host all all 0.0.0.0/0 scram-sha-256
17      host all all ::0/0 scram-sha-256
18    '';
19  };
20}