psql things

flake.nix

@@ -112,8 +112,14 @@
           { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
           {
             age.secrets = {
-              postgres-user-password-pda = {
+              postgres-matrix-synapse = {
-                file = ./secrets/postgres-user-password-pda.age;
+                file = ./secrets/postgres-matrix-synapse.age;
+                owner = "postgres";
+                group = "postgres";
+                mode = "0400";
+              };
+              postgres-hedgedoc = {
+                file = ./secrets/postgres-hedgedoc.age;
                 owner = "postgres";
                 group = "postgres";
                 mode = "0400";

hosts/sql/postgres.nix

@@ -29,7 +29,7 @@ let
         EXECUTE format(
           'ALTER ROLE %I WITH PASSWORD %L',
           '${e.user.name}',
-          trim(both E'\n' from pg_read_file('${config.age.secrets.postgres-${entry.user.name}.path}'))
+          trim(both E'\n' from pg_read_file('${config.age.secrets."postgres-${e.user.name}".path}'))
         );
       END IF;
     END
@@ -60,7 +60,7 @@ in
     };
   };
   systemd.services.postgresql.postStart = ''
-    ${pkgs.postgresql}/bin/psql \
+    ${config.services.postgresql.package}/bin/psql \
       --dbname=postgres \
       --no-password \
       --file=${passwordScript}

services/postgres.nix

@@ -10,6 +10,7 @@
         "--locale=C"
         "--encoding=UTF8"
       ];
+      settings.listen_addresses = "*";
     };
     postgresqlBackup = {
       enable = true;