nixfiles/hosts/hetzner-vm/containers/quassel/profiles/quassel.nix

{...}: {
  services.quassel = {
    enable = true;
    interfaces = ["0.0.0.0"];
  };

  services.postgresql.enable = true;
  services.postgresql.ensureDatabases = ["quassel"];
  services.postgresql.ensureUsers = [
    {
      name = "quassel";
      ensurePermissions."DATABASE quassel" = "ALL PRIVILEGES";
    }
  ];

  services.postgresql.authentication = "host quassel quassel localhost trust";
  networking.firewall.allowedTCPPorts = [4242];
}