aaha, there is the code I forgot to commit...

modules/nixos/services/authentication/zitadel/default.nix

@@ -1,6 +1,6 @@
 { config, lib, pkgs, namespace, ... }:
 let
-  inherit (lib) mkIf mkEnableOption mkForce;
+  inherit (lib) mkIf mkEnableOption;
 
   cfg = config.${namespace}.services.authentication.zitadel;
 
@@ -13,6 +13,8 @@ in
   };
 
   config = mkIf cfg.enable {
+    ${namespace}.services.persistance.postgresql.enable = true;
+
     environment.systemPackages = with pkgs; [
       zitadel
     ];
@@ -110,13 +112,6 @@ in
             ensureDBOwnership = true;
           }
         ];
-        authentication = mkForce ''
-          # Generated file, do not edit!
-          # TYPE  DATABASE  USER  ADDRESS       METHOD
-          local   all       all                 trust
-          host    all       all   127.0.0.1/32  trust
-          host    all       all   ::1/128       trust
-          '';
       };
 
       caddy = {