feat(postgresql): enable backup

systems/makanek/configuration.nix

@@ -43,7 +43,7 @@ in {
     passwordFile = toString <secrets/restic/password>;
     paths = [
       "/var/lib/codimd"
-      "/var/lib/postgresql"
+      config.services.postgresqlBackup.location
       "/var/lib/weechat"
       "/var/lib/nextcloud"
       "/var/lib/grafana"

systems/makanek/nextcloud.nix

@@ -65,13 +65,18 @@ in {
     }
   ];
 
+  services.postgresqlBackup = {
+    enable = true;
+    databases = [config.services.nextcloud.config.dbname];
+  };
+
   services.postgresql = {
     enable = true;
-    ensureDatabases = ["nextcloud"];
+    ensureDatabases = [config.services.nextcloud.config.dbname];
     ensureUsers = [
       {
         name = "nextcloud";
-        ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
+        ensurePermissions."DATABASE ${config.services.nextcloud.config.dbname}" = "ALL PRIVILEGES";
       }
     ];
   };

systems/makanek/tt-rss.nix

@@ -1,6 +1,7 @@
 {
   pkgs,
   lib,
+  config,
   ...
 }: let
   domain = "feed.kmein.de";
@@ -17,6 +18,11 @@ in {
     };
   };
 
+  services.postgresqlBackup = {
+    enable = true;
+    databases = [config.services.tt-rss.database.name];
+  };
+
   services.nginx.virtualHosts.${domain} = {
     enableACME = true;
     forceSSL = true;

systems/zaatar/atuin.nix

@@ -14,6 +14,11 @@ in {
     ];
   };
 
+  services.postgresqlBackup = {
+    enable = true;
+    databases = ["atuin"];
+  };
+
   systemd.tmpfiles.rules = [
     (tmpfilesConfig {
       type = "d";