too lazy to think of a message, so enjoy this pointless text. Good luck future me...

clanServices/zitadel/default.nix

@@ -76,6 +76,21 @@ in
               PasswordHasher.Hasher.Algorithm = "argon2id";
               SecretHasher.Hasher.Algorithm = "argon2id";
             };
+
+            Database.postgres = {
+              Host = "localhost";
+              # Zitadel will report error if port is not set
+              Port = 5432;
+              Database = "zitadel";
+              User = {
+                Username = "zitadel";
+                SSL.Mode = "disable";
+              };
+              Admin = {
+                Username = "postgres";
+                SSL.Mode = "disable";
+              };
+            };
           };
 
           steps.FirstInstance = {
@@ -96,6 +111,17 @@ in
             };
           };
         };
+
+        services.postgresql = {
+          enable = true;
+          ensureDatabases = [ database ];
+          ensureUsers = [
+            {
+              name = database;
+              ensureDBOwnership = true;
+            }
+          ];
+        };
       };
     };
   };