initial attempt at using postgres new module

nixos/configuration.nix

@@ -47,6 +47,12 @@ in
         key = "credentials";
         format = "yaml";
       };
+
+      "postgresql-credentials" = {
+        sopsFile = ./secrets/psql.yaml;
+        key = "credentials";
+        format = "yaml";
+      };
     };
   };
 
@@ -145,6 +151,13 @@ in
   # Minio for backend storage
 
   # Postgresql/postgrest for text storage
+  services.postgresql-db = {
+    enable = true;
+    dataDir = "var/lib/postgresql";
+    port = 5432;
+    credentialsFile = config.sops.secrets."postgresql-credentials".path;
+    databases = [ "rdblog" ];
+  };
 
   # Fullstack sourcecode
 

nixos/flake.nix

@@ -31,9 +31,10 @@
     tests-service.url = "github:RoyDumblauskas/tests-service?shallow=1";
     minio-service.url = "path:../homelab-services/minio-service";
     mc-service.url = "path:../homelab-services/mc-service";
+    postgresql-db.url = "path:../homelab-services/postgresql-db";
   };
 
-  outputs = { self, nixpkgs, nixvim, home-manager, disko, sops-nix, quasiSecrets, impermanence, firefox-addons, tests-service, minio-service, mc-service }@inputs: 
+  outputs = { self, nixpkgs, nixvim, home-manager, disko, sops-nix, quasiSecrets, impermanence, firefox-addons, tests-service, minio-service, mc-service, postgresql-db }@inputs: 
   let 
     nodes = [
       { 
@@ -64,6 +65,7 @@
           tests-service.nixosModules.default
           minio-service.nixosModules.minio-service
           mc-service.nixosModules.mc-service
+          postgresql-db.nixosModule.postgresql-db
           home-manager.nixosModules.home-manager {
             home-manager.useGlobalPkgs = true;
             home-manager.useUserPackages = true;

nixos/secrets/psql.yaml

@@ -0,0 +1,25 @@
+credentials: ENC[AES256_GCM,data:S1QafjWA/2wWQ0lYCbdMAHgDEmYbtf27b8VZ8V2nB4I5GX/8Dp3rLchlYp9qAaSNg2vnK0eWfstdOP/Ot9aNAEYlgh/q/aBap1qByLNNN5Tb,iv:UI16lzygVgF4SsLvY1K7r3V5602LdNmVFdbXtzMgH4Y=,tag:uRz0vTIGYmV2B5H6m14ZDw==,type:str]
+sops:
+    age:
+        - recipient: age1zad0qu648dhjav4pzjhkc6vswnqtacuv9230xcgle8wmv56r8ykqn0ud7y
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaQlJvWHhhdENTU0IrMTZu
+            WVFZUUxUa2ZFSms2eUlOVk84VEsxUHBiS0E4CnQrNVFqdEdpUDdseHRoZGpJUFZI
+            Y1dFR3d5UlF2RVpWYnRSbmFYeVFrcGcKLS0tIGlDYUZHcnk3cytSaVdKN3R6Z21Q
+            OEdRaUs4V1ZLZ3lkZ2U3UEQ0OEdXdEEKEQtKhg75sN76Xo+TP13Hk53bm/cfLsjG
+            +sLJrGoEh9JqCEuOjwq6V5pftpWU8qWKVZdTem1f4TBRV4ZzS6NdKw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age15w5qelqemnvytp38ywdwmflc6qmrqph3dwqmx3lrec5cm5d9nchq9pfe8s
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WDRqaXV1akU4U0tIN0Vj
+            OUhDWFdINEpmTEcvcDAraUVqck9pMDFab0JJCitmS0xaemQ2T0dMd1U4TzdQNldG
+            cGp4QWhkTFc0eW41ZUdDL0FOYmlDNlEKLS0tIFdjK2xLaEc4N2w1ckRYSXBjYjRr
+            VVZnNFk0empvbkNoVm5WWkhWbnk3SUkK+1wEgD9x1bRKp2SrDIgl/UYgKhnW0270
+            A90OzUDepvZNFAwKjORjNmm8n6IQ3aJz1XbKfaHQaP/MplN4vxz/5w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-16T05:46:32Z"
+    mac: ENC[AES256_GCM,data:8DHljSeEmLfCZ7kxkB1jaI18+QFuQwRwo8HGooXVcyeDgTnqemBgYiSwwaq1udfIFUqwt6mHAi6baJoy2tveoZkzrNYg2wpvz2+yTrD1e5K+Bx9z9VDnQoi8NFrsbRZE2P6kYNJVzkXG6l5vZZwzuplXImdBQ2E5leejFMEzIJg=,iv:1uIDhzaOw2I+rUxyj7YB9jWrVLtyBSt2mxXtvwPwlu8=,tag:4yvrqnTBz81UDmQ6HyZaMA==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.10.2