sops....

machines/discourse/configuration.nix

@@ -4,6 +4,10 @@ with lib;
 
 {
   sops.defaultSopsFile = ./secrets.yaml;
+  sops.secrets = {
+    discourseAdminPasswordFile = {};
+    discourseSecretKeyBaseFile = {};
+  };
 
   networking = {
     hostName = mkDefault "discourse";
@@ -28,6 +32,12 @@ with lib;
       passwordFile = config.sops.secrets.discourseAdminPasswordFile.path;
     };
     secretKeyBaseFile = config.sops.secrets.discourseSecretKeyBaseFile.path;
+    database.createLocally = true;
+    enableACME = false;
+  };
+  services.postgresql = {
+    enable = true;
+    package = pkgs.postgresql_13;
   };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];