{ pkgs, ... }:
{
  logs.services = [ "postgresql" ];

  services.postgresql = {
    # enable = true;
    package = pkgs.postgresql_17;

    settings = {
      # Memory Configuration
      shared_buffers = "1GB";
      effective_cache_size = "3GB";
      work_mem = "10MB";
      maintenance_work_mem = "205MB";

      # Checkpoint Related Configuration
      min_wal_size = "1GB";
      max_wal_size = "4GB";
      checkpoint_completion_target = 0.9;
      wal_buffers = -1;

      # Storage Configuration
      random_page_cost = 1.1;
      effective_io_concurrency = 200;
      maintenance_io_concurrency = 200;

      # Worker Processes Configuration
      max_worker_processes = 8;
      max_parallel_workers_per_gather = 2;
      max_parallel_workers = 8;
    };
  };

  systemd.services.postgresql = {
    harden = {
      enable = true;
      ipSockets = true;
    };

    serviceConfig = {
      PrivateUsers = false;
    };
  };
}