services: matrix: make sure db and role exist

services/matrix.nix

@@ -53,6 +53,14 @@ in {
   config = mkIf cfg.enable {
     services.postgresql = {
       enable = true;
+
+      ensureDatabases = ["matrix-synapse"];
+      ensureUsers = [
+        {
+          name = "matrix-synapse";
+          ensurePermissions."DATABASE matrix-synapse" = "ALL PRIVILEGES";
+        }
+      ];
     };
 
     services.postgresqlBackup = {
@@ -274,8 +282,7 @@ in {
 
     my.services.restic-backup = let
       dataDir = config.services.matrix-synapse.dataDir;
-    in
-      mkIf cfg.enable {
+    in {
       paths = [dataDir];
       # this is just caching for other servers media, doesn't need backup
       exclude = ["${dataDir}/media/remote_*"];