- configure oauth2 (this requires a custom module for now, will be resolved in 23.11) - harden systemd service - add systemd requires list - use socket postgres uri