Set PG users in the respective config file

hosts/cube/grafana.nix

@@ -13,6 +13,14 @@ in serverSystemConfiguration {
     maxretry = 3;
   };
 
+  services.postgresql = {
+    ensureDatabases = [ "grafana" ];
+    ensureUsers     = [{
+      name = "grafana";
+      ensureDBOwnership = true;
+    }];
+  };
+
   systemd.services.grafana.requires = [ "postgresql.service" ];
 
   services.grafana = enabled {

hosts/cube/nextcloud.nix

@@ -7,6 +7,14 @@ let
 in serverSystemConfiguration {
   age.secrets."cube/password.nextcloud".owner      = "nextcloud";
 
+  services.postgresql = {
+    ensureDatabases = [ "nextcloud" ];
+    ensureUsers     = [{
+      name = "nextcloud";
+      ensureDBOwnership = true;
+    }];
+  };
+
   systemd.services = {
     nextcloud-setup.requires = [ "postgresql.service" ];
     phpfpm-nextcloud.aliases = [ "nextcloud.service" ];

hosts/cube/postgresql.nix

@@ -27,13 +27,11 @@
 
     identMap = ''
     # Map           System   DBUser
-      superuser_map root     postgres
+      superuser_map root     ^(.*)$
-      superuser_map postgres postgres
+      superuser_map postgres ^(.*)$
       superuser_map /^(.*)$  \1
     '';
 
-    ensureDatabases = [ "grafana" "nextcloud" ];
-
     ensureUsers = [
       {
         name = "postgres";
@@ -46,12 +44,7 @@
         };
       }
       {
-        name = "grafana";
+        name = "root";
-        ensureDBOwnership = true;
-      }
-      {
-        name = "nextcloud";
-        ensureDBOwnership = true;
       }
     ];