VEGAS/database: use proper authentication

hosts/VEGAS/modules/database/default.nix

@@ -6,9 +6,5 @@
     checkConfig = true;
     package = pkgs.postgresql_12;
     dataDir = "/srv/storage/database/postgres-12/data";
-    authentication = lib.mkForce ''
-      local all all trust
-      host all all 127.0.0.1/32 trust
-    '';
   };
 }

hosts/VEGAS/services/nextcloud/default.nix

@@ -1,4 +1,7 @@
 { config, lib, pkgs, tools, ... }:
+let
+  cfg = config.services.nextcloud.config;
+in
 {
   age.secrets = {
     nextcloud-adminpass = {
@@ -44,6 +47,7 @@
       adminpassFile = config.age.secrets.nextcloud-dbpass.path;
     };
   };
+  services.postgresql.authentication = "local ${cfg.dbname} ${cfg.dbuser} md5";
   services.nginx.virtualHosts."${config.services.nextcloud.hostName}" = {
     addSSL = true;
     enableACME = true;