{ config, ... }:
{

  services.postgresql = {
    enable = true;
    ensureDatabases = [ config.services.gitea.user ];

    # type   database  DBuser  auth-method  mapping
    authentication = ''
      local  gitea     all     ident        map=gitea-users
    '';

    # name         sysuser  dbuser
    identMap = ''
      gitea-users  gitea    gitea
    '';
  };

}