DigitalOcean Postgres Has a Firewall Trap. We Walked Right Into It.

Adding a single trusted-source rule to a previously-open DO managed Postgres flips the entire DB into enforcement mode. We learned this the hard way.