hades: enable postgres backups

hosts/hades/default.nix

@@ -73,6 +73,10 @@ in {
       privatePort = 8080;
     };
 
+    postgresql-backup = {
+      enable = true;
+    };
+
     restic-backup = {
       enable = true;
       repo = "b2:hades-backup-alarsyo";

services/gitea/default.nix

@@ -95,6 +95,18 @@ in {
       ];
     };
 
+    services.postgresql = {
+      enable = true;
+
+      ensureDatabases = ["gitea"];
+      ensureUsers = [
+        {
+          name = "git";
+          ensurePermissions."DATABASE gitea" = "ALL PRIVILEGES";
+        }
+      ];
+    };
+
     services.postgresqlBackup = {
       databases = ["gitea"];
     };