--- title: "[bojemoi] fix(security): remove postgres port 5432 from public ingress" date: 2026-04-09T22:19:57+02:00 draft: false tags: ["commit", "bojemoi", "main"] categories: ["Git Activity"] summary: "Commit 1e20eb6 par Betty dans bojemoi" author: "Betty" --- ## Commit `1e20eb6` | | | |---|---| | **Repository** | bojemoi | | **Branch** | `main` | | **Author** | Betty | | **Hash** | `1e20eb638e74ba5a2c1e0595a5992322d141a571` | ### Description Port 5432:5432 was published in ingress mode on base_postgres, making PostgreSQL accessible on all Swarm node IPs. Removed — postgres is only reachable via the backend overlay network (internal services only). Co-Authored-By: Claude Sonnet 4.6 ### Files Changed ``` M stack/01-service-hl.yml ``` ### Diff Summary ``` stack/01-service-hl.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) ```