{
  pkgs,
  config,
  username,
  ...
}:
{
  services.postgresql = {
    enable = true;
    package = pkgs.postgresql_16;
    dataDir = "/tank/services/sql";
  };

  systemd.tmpfiles.rules = [
    # postgresql requires 0700
    "d ${config.services.postgresql.dataDir} 0700 postgresql postgresql"
  ];

  users.users.${username}.extraGroups = [
    "postgresql"
  ];
}