diff --git a/config/default.nix b/config/default.nix
index 7ac22c98..1cf17b84 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -111,16 +111,25 @@ lib.mkMerge [
 
     services = {
       gnome.gnome-initial-setup.enable = false;
+
       openssh = {
         # Required for deployment and sops
         enable = true;
         permitRootLogin = "prohibit-password";
       };
+
       portunus = with zentralwerk.lib.config.site.net.serv; {
         domain = "auth.c3d2.de";
         externalIp4 = hosts4.auth;
         externalIp6 = hosts6.up4.auth;
       };
+
+      postgresql.upgrade = {
+        extraArgs = [ "--link" ]
+          ++ lib.optional (config ? microvm) "--jobs=${toString config.microvm.vcpu}";
+        newPackage = pkgs.postgresql_15;
+        stopServices = [ "nginx" ];
+      };
     };
 
     security.acme = {