services: matrix: make sure db and role exist

services/matrix.nix

@@ -53,6 +53,14 @@ in {
   config = mkIf cfg.enable {
     services.postgresql = {
       enable = true;
+
+      ensureDatabases = ["matrix-synapse"];
+      ensureUsers = [
+        {
+          name = "matrix-synapse";
+          ensurePermissions."DATABASE matrix-synapse" = "ALL PRIVILEGES";
+        }
+      ];
     };
 
     services.postgresqlBackup = {
@@ -274,11 +282,10 @@ in {
 
     my.services.restic-backup = let
       dataDir = config.services.matrix-synapse.dataDir;
-    in
-      mkIf cfg.enable {
-        paths = [dataDir];
-        # this is just caching for other servers media, doesn't need backup
-        exclude = ["${dataDir}/media/remote_*"];
-      };
+    in {
+      paths = [dataDir];
+      # this is just caching for other servers media, doesn't need backup
+      exclude = ["${dataDir}/media/remote_*"];
+    };
   };
 }