{ makeSystem
, nixpkgs
}:
makeSystem {
  system = "x86_64-linux";
  name = "nixng-hass-postgresql";
  inherit nixpkgs;
  config =
    { pkgs, lib, ... }:
    let
      inherit (lib)
        singleton;
    in
    {
      config = {
        dumb-init = {
          enable = true;
          type.services = {};
        };
        services.postgresql = {
          enable = true;
          package = pkgs.postgresql_12;

          initialScript = "/secrets/init.sql";
          enableTCPIP = true;

          authentication = "host  all all all          md5";

          ensureDatabases = [ "hass" ];
          ensureExtensions = {
            "pg_trgm" = [ "hass" ];
          };
          ensureUsers = singleton {
            name = "hass";
            ensurePermissions = {
              "DATABASE \"hass\"" = "ALL PRIVILEGES";
            };
          };
        };
      };
    };
}