---
title: "[bojemoi] security(network): isoler postgres du réseau pentest pour les workers"
date: 2026-07-22T17:14:57+02:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit 5f62eb5 par grafana-watcher dans bojemoi"
author: "grafana-watcher"
---

## Commit `5f62eb5`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | grafana-watcher |
| **Hash** | `5f62eb522c088d2c5a78a89725d6c06a08be5bc4` |


### Description

Ajoute le réseau pentest au service postgres afin que les workers
borodino (ak47, bm12, uzi, zap, nuclei, sliver, masscan) puissent
y accéder sans passer par backend.

Contexte: suite à l'incident OpenAI/HuggingFace (2026-07-22), réduction
de la blast radius en cas de compromission d'un worker via input hostile.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	stack/01-service-hl.yml
```

### Diff Summary

```
 stack/01-service-hl.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)
```