&def_service(ghost, ghost, tcp, 9000); &allow_service_for(ghost, web); &allow_service_for(postgres, ghost);