diff --git a/lib/fudo/grafana.nix b/lib/fudo/grafana.nix
index 434236c..2581f1d 100644
--- a/lib/fudo/grafana.nix
+++ b/lib/fudo/grafana.nix
@@ -231,6 +231,7 @@ in {
             user = cfg.database.user;
             password = "$__file{${cfg.database.password-file}}";
             type = "postgres";
+            ssl_mode = "require";
           };
 
           "ldap.auth" = mkIf (cfg.ldap != null) (let
diff --git a/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh b/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
index 76fc4ed..f93de99 100755
--- a/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
+++ b/lib/fudo/mail/dovecot/pipe_bin/sa-learn-ham.sh
@@ -1,3 +1,3 @@
 #!/bin/bash
 set -o errexit
-exec rspamc -h /run/rspamd/worker-controller.sock learn_ham
\ No newline at end of file
+exec rspamc -h /run/rspamd/worker-controller.sock learn_ham