School/services: add mysql

roles/school/services/default.nix

@@ -2,5 +2,6 @@
   imports = [
     ./networkmanager.nix
     ./syncthing.nix
+    ./mysql.nix
   ];
 }

roles/school/services/mysql.nix

@@ -0,0 +1,33 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  services.mysql = {
+    enable = true;
+    package = pkgs.mysql84;
+    user = "toast";
+    group = "users";
+  };
+
+  # Don't autostart MySQL
+  systemd.services.mysql.wantedBy = lib.mkForce [];
+
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+    	if (
+    		action.id == "org.freedesktop.systemd1.manage-units" &&
+    		action.lookup("unit") == "mysql.service" &&
+    		subject.user == "${config.services.mysql.user}"
+    	)
+    	{
+    		return polkit.Result.YES;
+    	}
+    })
+  '';
+
+  environment.systemPackages = with pkgs; [
+    mycli
+  ];
+}