tsuki: use `ensureDBOwnership` for postgres for nixos 24.05 migration

hosts/tsuki/services/headscale.nix

@@ -55,14 +55,10 @@ in {
   services.postgresql = lib.mkIf cfg.enable {
     enable = true;
     ensureDatabases = [ "headscale" ];
-    ensureUsers = [
-      (rec {
+    ensureUsers = [{
         name = "headscale";
-        ensurePermissions = {
-          "DATABASE \"${name}\"" = "ALL PRIVILEGES";
-        };
-      })
-    ];
+        ensureDBOwnership = true;
+    }];
   };
 
   environment.systemPackages = lib.mkIf cfg.enable [ pkgs.headscale ];

hosts/tsuki/services/hedgedoc.nix

@@ -53,11 +53,10 @@ in {
 
     services.postgresql = {
       ensureDatabases = [ "hedgedoc" ];
+
       ensureUsers = [{
         name = "hedgedoc";
-        ensurePermissions = {
-          "DATABASE \"hedgedoc\"" = "ALL PRIVILEGES";
-        };
+        ensureDBOwnership = true;
       }];
     };
 

hosts/tsuki/services/matrix/postgres.nix

@@ -5,9 +5,7 @@
     cfg = config.services;
     db = name: {
       inherit name;
-      ensurePermissions = {
-        "DATABASE \"${name}\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
     };
   in {
     enable = true;

hosts/tsuki/services/minecraft/default.nix

@@ -170,9 +170,7 @@ in
     o = lib.optional;
     db = name: {
       inherit name;
-      ensurePermissions = {
-        "DATABASE \"${name}\"" = "ALL PRIVILEGES";
-      };
+      ensureDBOwnership = true;
     };
   in {
     enable = true;

hosts/tsuki/services/nextcloud.nix

@@ -58,13 +58,9 @@
   services.postgresql = {
     enable = true;
     ensureDatabases = [ "nextcloud" ];
-    ensureUsers = [
-      (rec {
-        name = "nextcloud";
-        ensurePermissions = {
-          "DATABASE \"${name}\"" = "ALL PRIVILEGES";
-        };
-      })
-    ];
+    ensureUsers = [{
+      name = "nextcloud";
+      ensureDBOwnership = true;
+    }];
   };
 }

hosts/tsuki/services/vaultwarden.nix

@@ -59,14 +59,10 @@ in {
   services.postgresql = lib.mkIf cfg.enable {
     enable = true;
     ensureDatabases = [ "vaultwarden" ];
-    ensureUsers = [
-      (rec {
-        name = "vaultwarden";
-        ensurePermissions = {
-          "DATABASE \"${name}\"" = "ALL PRIVILEGES";
-        };
-      })
-    ];
+    ensureUsers = [{
+      name = "vaultwarden";
+      ensureDBOwnership = true;
+    }];
   };
 
   local.socketActivation.vaultwarden = {