From edfae0da737674e0bb874441a183297c30520de1 Mon Sep 17 00:00:00 2001 From: Andrea Cappelletti Date: Fri, 17 Jul 2026 18:57:54 -0400 Subject: [PATCH] deploy: bind pricing api to localhost, not 0.0.0.0 The api service published 4000:4000 (all interfaces), exposing the GraphQL endpoint directly on the host IP alongside the Caddy reverse proxy. Bind it to 127.0.0.1 like the db service already is; Caddy proxies /graphql, so the container port never needs to be public. Matches the deployed configuration. --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 0d883f9..8cb31ed 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -28,7 +28,7 @@ services: SCRAPE_CONCURRENCY: ${SCRAPE_CONCURRENCY:-4} MAX_BATCH_SIZE: ${MAX_BATCH_SIZE:-500} ports: - - "4000:4000" + - "127.0.0.1:4000:4000" # localhost only; Caddy reverse-proxies /graphql. Not publicly exposed. depends_on: db: condition: service_healthy