allow postgres access from host OS

also only run full update on bare box