Document Nextcloud deployment and Infisical secrets

postgres/README.md

@@ -112,7 +112,7 @@ Each application should use its own dedicated database user whenever possible.
 Credentials are stored in:
 
 ```text
-/srv/secrets/company.env
+Infisical
 ```
 
 Current variables:
@@ -229,7 +229,7 @@ docker exec -i postgres psql -U postgres < postgres-full-backup.sql
 
 * PostgreSQL is not exposed publicly.
 * Database traffic is restricted to Docker internal networks.
-* Credentials are stored in `/srv/secrets/company.env`.
+* Credentials are stored in Infisical and injected at runtime by `slcompose`.
 * Administrative access should use the `postgres` role only when necessary.
 * Applications should use dedicated database users.
 
@@ -267,10 +267,10 @@ Minimum requirements for recovery:
 
 * PostgreSQL container configuration
 * Database backups
-* `/srv/secrets/company.env`
+* Infisical access and PostgreSQL service secrets
 * Docker network configuration
 
-Without the secrets file, applications may not be able to reconnect to their databases after restoration.
+Without Infisical recovery, applications may not be able to reconnect to their databases after restoration.
 
 ---