repos / analytics / log / 30db32f1

Bind docker port to localhost only

30db32f1 by Isaac Bythewood · 3 months ago

Bind docker port to localhost only

Prevents Docker from exposing the app port publicly, bypassing Caddy
and the firewall. Only Caddy can reach the container now.

modified docker-compose.yml

@@ -6,7 +6,7 @@ services:    volumes:      - /srv/data/analytics/:/data/    ports:      - "${PORT}:${PORT}"      - "127.0.0.1:${PORT}:${PORT}"    command: >      gunicorn analytics.asgi:application --preload --workers 2 --max-requests 256      --timeout 30 --bind :${PORT} --worker-class uvicorn.workers.UvicornWorker