@@ -4,6 +4,6 @@ services: build: . env_file: .env ports: - "${PORT}:${PORT}" - "127.0.0.1:${PORT}:${PORT}" command: yarn next:start restart: unless-stopped
Bind docker port to localhost only
Bind docker port to localhost only Prevents Docker from exposing the app port publicly, bypassing Caddy and the firewall. Only Caddy can reach the container now. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>