{ ... }:
{
  services.postgresql = {
    enable = true;
    authentication = ''
      local all all peer map=mapping
    '';
    identMap = ''
      mapping fcuny    postgres
      mapping root     postgres
      mapping postgres postgres
      mapping /^(.*)$  \1
    '';
  };

  services.postgresqlBackup = {
    enable = true;
    compression = "zstd";
  };
}