diff --git a/hosts/hitsugibune/authentik.nix b/hosts/hitsugibune/authentik.nix
index ebb08ff..e7711c5 100644
--- a/hosts/hitsugibune/authentik.nix
+++ b/hosts/hitsugibune/authentik.nix
@@ -11,10 +11,24 @@
       avatars = "initials";
     };
 
+    postgresql = {
+      host = "/run/postgresql";
+      name = "authentik";
+      user = "authentik";
+    };
+
     nginx = {
       enable = true;
       enableACME = true;
       host = "auth.sprechtl.me";
     };
   };
+
+  services.postgresql = {
+  ensureDatabases = [ "authentik" ];
+  ensureUsers = [{
+    name = "authentik";
+    ensureDBOwnership = true;
+  }];
+};
 }