{ config, pkgs, lib, ... }: { services.mysql = { enable = true; package = pkgs.mysql84; user = "toast"; group = "users"; }; # Don't autostart MySQL systemd.services.mysql.wantedBy = lib.mkForce []; security.polkit.extraConfig = '' polkit.addRule(function(action, subject) { if ( action.id == "org.freedesktop.systemd1.manage-units" && action.lookup("unit") == "mysql.service" && subject.user == "${config.services.mysql.user}" ) { return polkit.Result.YES; } }) ''; environment.systemPackages = with pkgs; [ # mycli ]; }