heartwood every commit a ring

Bind docker port to localhost only

9c29a65a by Isaac Bythewood · 1 month ago

Bind docker port to localhost only

Prevents Docker from exposing the app port publicly, bypassing Caddy
and the firewall. Only Caddy can reach the container now.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
modified docker-compose.yml
@@ -4,6 +4,6 @@ services:    build: .    env_file: .env    ports:      - "${PORT}:${PORT}"      - "127.0.0.1:${PORT}:${PORT}"    command: yarn next:start    restart: unless-stopped