From 294d7409709aa5c4cd88a481a3349b587860848f Mon Sep 17 00:00:00 2001
From: grafana-watcher <grafana-watcher@bojemoi.lab>
Date: Wed, 22 Jul 2026 17:14:57 +0200
Subject: [PATCH] post: commit 5f62eb5 in bojemoi

---
 .../commits/2026-07-22-commit-5f62eb5.md      | 43 +++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 content/posts/commits/2026-07-22-commit-5f62eb5.md

diff --git a/content/posts/commits/2026-07-22-commit-5f62eb5.md b/content/posts/commits/2026-07-22-commit-5f62eb5.md
new file mode 100644
index 0000000..e610727
--- /dev/null
+++ b/content/posts/commits/2026-07-22-commit-5f62eb5.md
@@ -0,0 +1,43 @@
+---
+title: "[bojemoi] security(network): isoler postgres du réseau pentest pour les workers"
+date: 2026-07-22T17:14:57+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 5f62eb5 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `5f62eb5`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `5f62eb522c088d2c5a78a89725d6c06a08be5bc4` |
+
+
+### Description
+
+Ajoute le réseau pentest au service postgres afin que les workers
+borodino (ak47, bm12, uzi, zap, nuclei, sliver, masscan) puissent
+y accéder sans passer par backend.
+
+Contexte: suite à l'incident OpenAI/HuggingFace (2026-07-22), réduction
+de la blast radius en cas de compromission d'un worker via input hostile.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/01-service-hl.yml
+```
+
+### Diff Summary
+
+```
+ stack/01-service-hl.yml | 7 ++++++-
+ 1 file changed, 6 insertions(+), 1 deletion(-)
+```