diff --git a/terraform/clouds/azure/postgres.tf b/terraform/clouds/azure/postgres.tf
index 65f66cb..1f1c47b 100644
--- a/terraform/clouds/azure/postgres.tf
+++ b/terraform/clouds/azure/postgres.tf
@@ -32,6 +32,7 @@ resource "azurerm_postgresql_flexible_server" "postgres" {
   private_dns_zone_id    = azurerm_private_dns_zone.postgres[0].id
   administrator_login    = "console"
   administrator_password = random_password.password.result
+  public_network_access_enabled = false
 
   storage_mb = var.postgres_disk
   sku_name   = var.postgres_sku
diff --git a/terraform/clouds/azure/variables.tf b/terraform/clouds/azure/variables.tf
index 8936b42..518dfb3 100644
--- a/terraform/clouds/azure/variables.tf
+++ b/terraform/clouds/azure/variables.tf
@@ -69,7 +69,7 @@ variable "db_sku" {
 
 variable "workload_identity_enabled" {
   type = bool
-  default = false
+  default = true
 }
 
 variable "postgres_dns_zone" {