{config, pkgs, ...}:
{

networking.firewall.allowedTCPPorts = [ 5432 ];
# Enable PostgreSQL 
  services.postgresql = {
    enable = true;
    authentication = "host all all 192.168.0.0/16 trust";

    # Ensure the database, user, and permissions always exist
    ensureDatabases = [ "pizzajoffredb" ];
    ensureUsers = [
     { name = "pizzajoffre";
       ensurePermissions."DATABASE pizzajoffredb" = "ALL PRIVILEGES";
     }
    ];
  };

}