{ pkgs, ... }: { services.postgresql = { enable = true; ensureUsers = [{ name = "misskey"; ensurePermissions."DATABASE misskey" = "ALL PRIVILEGES"; }]; ensureDatabases = [ "misskey" ]; }; services.redis.servers."misskey" = { enable = true; port = 6379; }; networking.firewall.allowedTCPPorts = [ 8024 ]; }