};
config = lib.mkIf cfg.enable {
+ nixpkgs.overlays = [ (self: super: rec {
+ postgresql = self.postgresql_11_custom;
+ }) ];
+
networking.firewall.allowedTCPPorts = [ 5432 ];
security.acme.certs."postgresql" = config.services.myCertificates.certConfig // {