diff --git a/systems/etna/default.nix b/systems/etna/default.nix
index 2a51dbd..4f96daa 100644
--- a/systems/etna/default.nix
+++ b/systems/etna/default.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  pkgs,
   config,
   _utils,
   ...
@@ -28,6 +27,10 @@ in
     secrets.generate
     cfTunnelSecret.generate
 
+    # essential configs, do not remove
+    ./postgresql.nix
+
+    # services
     ./cobalt.nix
     ./dendrite.nix
     ./forgejo.nix
@@ -59,11 +62,6 @@ in
     openssh.openFirewall = true;
     nginx.enable = true;
 
-    postgresql = {
-      enable = true;
-      package = pkgs.postgresql_16;
-    };
-
     frp = {
       enable = true;
       role = "client";
diff --git a/systems/etna/postgresql.nix b/systems/etna/postgresql.nix
new file mode 100644
index 0000000..0df2f4e
--- /dev/null
+++ b/systems/etna/postgresql.nix
@@ -0,0 +1,19 @@
+{ pkgs, ... }:
+{
+  services = {
+    postgresql = {
+      enable = true;
+      package = pkgs.postgresql_16;
+
+      port = 5432;
+      enableTCPIP = true;
+    };
+
+    postgresqlBackup = {
+      enable = true;
+      backupAll = true;
+      compression = "zstd";
+      location = "/data/backups/postgresql";
+    };
+  };
+}