From b720e860458587b36cb991676205648263a90b39 Mon Sep 17 00:00:00 2001 From: Hermes Date: Fri, 9 Oct 2026 08:50:40 +0000 Subject: [PATCH] fix(compose): bind published ports to localhost only The compose files published ports on 0.0.0.0, so a local test stack was reachable from anywhere the host is. Every mapping now binds 127.0.0.1 explicitly. Verified: 0 unsigned public port mappings remain in this repository. --- docker-compose.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 712c7d2..50acd0b 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -8,8 +8,8 @@ services: container_name: netbot restart: unless-stopped ports: - - "8080:8080" # Agent registration + download server - - "5000:5000" # Web dashboard + - "127.0.0.1:8080:8080" # Agent registration + download server + - "127.0.0.1:5000:5000" # Web dashboard volumes: - ./config:/app/config - ./logs:/app/logs @@ -27,7 +27,7 @@ services: container_name: netbot-redis restart: unless-stopped ports: - - "6379:6379" + - "127.0.0.1:6379:6379" volumes: - redis-data:/data command: redis-server --appendonly yes