🔧 update postgres permissions

modules/drone/default.nix

@@ -9,9 +9,7 @@
       ensureUsers = [
         {
           name = "drone";
-          ensurePermissions = {
-            "DATABASE drone" = "ALL PRIVILEGES";
-          };
+          ensureDBOwnership = true;
         }
       ];
     };

modules/gitea/default.nix

@@ -37,10 +37,21 @@ in
       dump.enable = false;
 
       database = {
+        createDatabase = false;
         type = "postgres";
+        name = "gitea";
+        socket = "/run/postgresql";
         user = "git";
       };
     };
+    postgresql = {
+      ensureDatabases = [ "gitea" ];
+      ensureUsers = [
+        {
+          name = "git";
+        }
+      ];
+    };
     postgresqlBackup.databases = [ "gitea" ];
   };
 }