feat: add lldap database

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

hosts/db-01/default.nix

@@ -1,8 +1,4 @@
-{
+{ pkgs, ... }:
-  inputs,
-  config,
-  ...
-}:
 {
   imports = [
     ./disk-config.nix
@@ -20,6 +16,21 @@
 
   services.postgresql = {
     enable = true;
+    enableTCPIP = true;
+    authentication = pkgs.lib.mkOverride 10 ''
+      #type database dbuser origin-address auth-method
+      local all all trust
+      host all all 100.64.0.0/24 trust # trust tailnet
+    '';
+    ensureDatabases = [
+      "lldap"
+    ];
+    ensureUsers = [
+      {
+        name = "lldap";
+        ensureDBOwnership = true;
+      }
+    ];
   };
 
   system.stateVersion = "25.05";