diff --git a/content/posts/commits/2026-07-20-commit-5d00256.md b/content/posts/commits/2026-07-20-commit-5d00256.md
new file mode 100644
index 0000000..5fd2e84
--- /dev/null
+++ b/content/posts/commits/2026-07-20-commit-5d00256.md
@@ -0,0 +1,40 @@
+---
+title: "[bojemoi] fix(opsec): fermer port 4444 sur bojemoi.me (nginx lightsail)"
+date: 2026-07-20T14:21:11+02:00
+draft: false
+tags: ["commit", "bojemoi", "main"]
+categories: ["Git Activity"]
+summary: "Commit 5d00256 par grafana-watcher dans bojemoi"
+author: "grafana-watcher"
+---
+
+## Commit `5d00256`
+
+| | |
+|---|---|
+| **Repository** | bojemoi |
+| **Branch** | `main` |
+| **Author** | grafana-watcher |
+| **Hash** | `5d00256035180a1bc365d0aadca0223b18f0bcb9` |
+
+
+### Description
+
+Bloc stream listen 4444 commenté dans nginx.conf — port MSF handler
+précédemment exposé publiquement via relay direct bojemoi.me:4444.
+La chaîne C2 active passe exclusivement par Fly.io:443 → VPN → lab.
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	lightsail/etc/nginx/nginx.conf
+```
+
+### Diff Summary
+
+```
+ lightsail/etc/nginx/nginx.conf | 44 ++++++++++++++++++++++++++++++++++++------
+ 1 file changed, 38 insertions(+), 6 deletions(-)
+```