{pkgs, ...}: {
  services.postgresql = {
    enable = true;
    ensureUsers = [
      {
        name = "misskey";
        ensurePermissions."DATABASE misskey" = "ALL PRIVILEGES";
      }
    ];
    ensureDatabases = ["misskey"];
  };
  services.redis.servers."misskey" = {
    enable = true;
    port = 6379;
  };
  networking.firewall.allowedTCPPorts = [8024];
}