diff --git a/.github/workflows/elixir.yaml b/.github/workflows/elixir.yaml
index 3549cdd..039b310 100644
--- a/.github/workflows/elixir.yaml
+++ b/.github/workflows/elixir.yaml
@@ -24,7 +24,7 @@ jobs:
     # Additional services can be defined here if required.
     services:
       db:
-        image: postgres:15
+        image: postgres:16
         ports: ["5432:5432"]
         env:
           POSTGRES_PASSWORD: postgres
@@ -40,8 +40,8 @@ jobs:
       # Specify the OTP and Elixir versions to use when building
       # and running the workflow steps.
       matrix:
-        otp: ["26.2"]
-        elixir: ["1.15.7"]
+        otp: ["27.3.42"]
+        elixir: ["1.18.4"]
     steps:
       # Step: Setup Elixir + Erlang image as the base.
       - name: Set up Elixir
diff --git a/k8s/secrets.yaml b/k8s/secrets.yaml
new file mode 100644
index 0000000..8b07c5a
--- /dev/null
+++ b/k8s/secrets.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: aprs-secrets
+  namespace: aprs-app
+type: Opaque
+stringData: # Using stringData for readability, actual secrets should be base64 encoded if using `data`
+  DATABASE_URL: "ecto://postgres-service.aprs-app.svc.cluster.local/aprs_prod" # User/pass removed
+  POSTGRES_USER: "your_db_user"
+  POSTGRES_PASSWORD: "your_db_password"
+  SECRET_KEY_BASE: "your_super_secret_key_base_here"
+  # Add other secrets like APRS_CALLSIGN, APRS_PASSCODE if needed
+  APRS_CALLSIGN: "NOCALL"
+  APRS_PASSCODE: "NOPASS"
+  PHX_HOST: "your_app_domain.com" # Replace with your actual host