Merge pull request #503 from UCLALibrary/close-ports

Only allow localhost to access exposed docker ports.
UCLALibrary · Nov 13, 2019 · 3689932 · 3689932
2 parents 3145bb5 + d80619e
commit 3689932
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/docker-compose-standalone.yml b/docker-compose-standalone.yml
@@ -17,7 +17,7 @@ services:
       SOLR_URL: http://solr:8983/solr/calursus
       SOLR_TEST_URL: http://solr_test:8983/solr/calursus
     ports:
-      - "3003:3000"
+      - "127.0.0.1:3003:3000"
     volumes:
       - .:/ursus
       - bundle_dir:/usr/local/bundle
@@ -28,19 +28,19 @@ services:
       - ./docker-entrypoint-initdb.d:/docker-entrypoint-initdb.d
       - mysql_data:/var/lib/mysql
     ports:
-      - 3306:3306
+      - "127.0.0.1:3306:3306"
     environment:
       MYSQL_ALLOW_EMPTY_PASSWORD: "yes"
 
   solr:
     image: uclalibrary/solr-ursus
     ports:
-      - 8983:8983
+      - "127.0.0.1:8983:8983"
 
   solr_test:
     image: uclalibrary/solr-ursus
     ports:
-      - 8985:8983
+      - "127.0.0.1:8985:8983"
   dockerhost:
     image: qoomon/docker-host
     cap_add: [ 'NET_ADMIN', 'NET_RAW' ]

diff --git a/docker-compose-with-californica.yml b/docker-compose-with-californica.yml
@@ -15,7 +15,7 @@ services:
       SOLR_URL: http://solr:8983/solr/californica
       SOLR_TEST_URL: http://solr_test:8983/solr/californica
     ports:
-      - "3003:3000"
+      - "127.0.0.1:3003:3000"
     volumes:
       - .:/ursus
       - bundle_dir:/usr/local/bundle