{ config, lib, pkgs, ... }:

with lib;
let
  hostname = config.instance.hostname;
  secrets = config.fudo.secrets.host-secrets.${hostname};
in {
  config.fudo.postgresql = {
    enable = true;

    local-networks = config.instance.local-networks;
    admin-users = config.instance.admin-users;

    ssl-private-key = secrets.postgres-ssl-key;
    ssl-certificate = secrets.postgres-ssl-certificate;
    keytab = secrets.postgres-keytab.target-file;
  };
}