repos / status / log / 2bb5bbe5

Bind docker port to localhost only

2bb5bbe5 by Isaac Bythewood · 3 months ago

Bind docker port to localhost only

Prevents Docker from exposing the app port publicly, bypassing Caddy
and the firewall. Only Caddy can reach the container now.

modified docker-compose.yml

@@ -12,7 +12,7 @@ services:    volumes:      - /srv/data/status/:/data/    ports:      - "${PORT}:${PORT}"      - "127.0.0.1:${PORT}:${PORT}"    command: >      gunicorn status.asgi:application --preload --workers 2 --max-requests 256      --timeout 30 --bind :${PORT} --worker-class uvicorn.workers.UvicornWorker