flake update

hosts/AZ-PRM-1/secrets.nix

@@ -9,6 +9,7 @@
         mode = "644";
       };
       kestra-env = {file = ../../secrets/kestra-env.age;};
+      kestra-secrets = {file = ../../secrets/kestra-secrets.age;};
       n8n-env = {
         file = ../../secrets/n8n-env-prm.age;
       };

hosts/AZ-PRM-1/services/containers/kestra.nix

@@ -9,7 +9,10 @@
 in {
   virtualisation.oci-containers.containers."${serviceName}" = {
     image = "docker.io/kestra/kestra:latest";
-    environmentFiles = [config.age.secrets.kestra-env.path];
+    environmentFiles = [
+      config.age.secrets.kestra-env.path
+      config.age.secrets.kestra-secrets.path
+    ];
     cmd = ["server" "standalone" "--config" "/etc/config/application.yaml"];
     ports = ["127.0.0.1:${toString servicePort}:8080"];
     user = "root";

hosts/AZ-PRM-1/services/postgres.nix

@@ -49,7 +49,6 @@
       host    kestra       kestra       10.89.0.0/24    scram-sha-256
 
       # Deny all other connections
-      local   all       all       reject
       host    all       all       0.0.0.0/0      reject
       host    all       all       ::/0           reject
     '';