From cc435575111658497f55e4764665767a4af3bde1 Mon Sep 17 00:00:00 2001
From: Stefan Haun <tux@netz39.de>
Date: Tue, 6 Sep 2022 15:12:01 +0200
Subject: [PATCH] :wrench: Block external access to docker containers

This needs to go through ingress now!
---
 pottwal.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/pottwal.yml b/pottwal.yml
index ca6258c..4275be9 100644
--- a/pottwal.yml
+++ b/pottwal.yml
@@ -57,8 +57,7 @@
         restart_policy: unless-stopped
         detach: yes
         ports:
-#          - 127.0.0.1:{{ gitea_host_port }}:3000
-          - "{{ gitea_host_port }}:3000"
+          - 127.0.0.1:{{ gitea_host_port }}:3000
           - 2222:2222
         env:
           APP_NAME="Netz39 Gitea"
@@ -100,7 +99,7 @@
         state: started
         detach: yes
         ports:
-          - "{{ uritools_host_port }}:8080"
+          - "127.0.0.1:{{ uritools_host_port }}:8080"
         restart_policy: unless-stopped
 
     - name: Setup proxy site uritools.n39.eu
@@ -118,7 +117,7 @@
         state: started
         detach: yes
         ports:
-          - "{{ entities_validation_svc_host_port }}:8080"
+          - "127.0.0.1:{{ entities_validation_svc_host_port }}:8080"
         restart_policy: unless-stopped
 
     - name: Setup proxy site entities-validation.svc.n39.eu
@@ -136,7 +135,7 @@
         state: started
         detach: yes
         ports:
-          - "{{ shlink_host_port }}:8080"
+          - "127.0.0.1:{{ shlink_host_port }}:8080"
         restart_policy: unless-stopped
         env:
           SHORT_DOMAIN_HOST: "{{ shlink_domain_name }}"
@@ -198,7 +197,7 @@
         state: started
         detach: yes
         ports:
-          - "{{ hedgedoc_host_port }}:3000"
+          - "127.0.0.1:{{ hedgedoc_host_port }}:3000"
         restart_policy: unless-stopped
         env:
           NODE_ENV: "production"