Guard the store and management ports on adopted nodes, and load the filter through a unit that never flushes the ruleset (hq ADR 0100)

2026-09-22 17:32:32 +02:00
parent f4097b3c57
commit 0c37d7389d
4 changed files with 19 additions and 4 deletions
@@ -32,6 +32,9 @@
      "why": "modules on any machine that were granted a database"
    }
  ],
+  "guards": [
+    5432
+  ],
  "serves": {
    "postgres-database": {
      "port": 5432