postgres: Set auth method to "reject"

This will reject connections from anywhere except 127.0.0.1, i.e., the
pod's network namespace.

This makes password authentication properly obsolete, instead of just
hiding the password (but still never authenticating with it), but
required a change upstream:
https://github.com/docker-library/postgres/pull/859

pkgs/minecraft/forge-server.nix

@@ -3,12 +3,12 @@
 
 let
   name = "forge-server";
-  version = "1.16.5-36.1.1";
+  version = "1.16.5-36.1.65";
   mirror = "https://files.minecraftforge.net/maven/net/minecraftforge/forge";
   src = fetchurl {
     url = "${mirror}/${version}/forge-${version}-installer.jar";
     # Forge doesn't seem to like newer shas
-    sha1 = "78e5bd0b19f05136bb25bf3c5be9b64a1d0e850e";
+    sha1 = "9aedcd5e64bfc12483b9c51bc4cf18e551ad054a";
   };
 
   unpackCmd = "mkdir -p src; cp $curSrc src/forge-${version}-installer.jar";
@@ -40,7 +40,7 @@ let
 
     outputHashAlgo = "sha256";
     outputHashMode = "recursive";
-    outputHash = "CzzQhnN+DBgOJAa9MlNhT338VcDLy2ULMTMCecmxMQ4=";
+    outputHash = "lHAuKgwD2gzTb+n3pLgpXsDGYSLF/EYlGy0TfCoU5uQ=";
   };
 
 in stdenv.mkDerivation rec {

pkgs/minecraft/voor-kia/mods.json

@@ -457,15 +457,15 @@
   },
   {
     "project": "the-bumblezone-forge",
-    "id": "3201726",
+    "id": "3389654",
-    "filename": "the_bumblezone-1.16.5-2.2.14.jar",
+    "filename": "the_bumblezone-1.16.5-2.4.9-forge.jar",
-    "sha256": "b1f478dcd2fffdf8d52dd4ea4760c170bf9b50ef2b6b5ede97b0921ad9602e90"
+    "sha256": "51b2b5860ee391df2ea76c235c6614b34225312ebadaca4893c8ff16b0e9242a"
   },
   {
     "project": "the-undergarden",
-    "id": "3176785",
+    "id": "3361666",
-    "filename": "The_Undergarden-1.16.5-0.4.5.jar",
+    "filename": "The_Undergarden-1.16.5-0.5.4.jar",
-    "sha256": "a48b6d6a6075ecb3ddaff7877796a996d38f94810f8eb2ae1d0f0612d9827808"
+    "sha256": "b596836a5c1d50cf1c65c50ea728b0e295965cf9a4091a8eb1caac517aad5c50"
   },
   {
     "project": "towers-of-the-wild",