diff --git a/content/posts/commits/2026-04-09-commit-1e20eb6.md b/content/posts/commits/2026-04-09-commit-1e20eb6.md
new file mode 100644
index 0000000..e723cd5
--- /dev/null
+++ b/content/posts/commits/2026-04-09-commit-1e20eb6.md
@@ -0,0 +1,40 @@
+---
+title: "[bojemoi] fix(security): remove postgres port 5432 from public ingress"
+date: 2026-04-09T22:19:57+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 1e20eb6 par Betty dans bojemoi"
+author: "Betty"
+---
+
+## Commit `1e20eb6`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | Betty |
+| **Hash** | `1e20eb638e74ba5a2c1e0595a5992322d141a571` |
+
+
+### Description
+
+Port 5432:5432 was published in ingress mode on base_postgres, making
+PostgreSQL accessible on all Swarm node IPs. Removed — postgres is only
+reachable via the backend overlay network (internal services only).
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	stack/01-service-hl.yml
+```
+
+### Diff Summary
+
+```
+ stack/01-service-hl.yml | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+```