Overlay configuration for postgres hardening