From 2563ef6b0dbd1214871d26805dd83bd5be090830 Mon Sep 17 00:00:00 2001
From: Pascal Ernster <pascal.ernster@rub.de>
Date: Thu, 27 Apr 2023 12:37:20 +0200
Subject: [PATCH] Remove unneeded ports from docker-compose.yml and
 docker-compose.override.yml

Don't expose any ports except port 3000 to outside the Docker
environment, and only expose port 3000 to the Docker host's loopback
interface (127.0.0.1 and [::1]).
---
 docker-compose.override.yml | 9 ++-------
 docker-compose.yml          | 2 --
 2 files changed, 2 insertions(+), 9 deletions(-)

diff --git a/docker-compose.override.yml b/docker-compose.override.yml
index 49655ca7..915b63b4 100644
--- a/docker-compose.override.yml
+++ b/docker-compose.override.yml
@@ -17,20 +17,17 @@ volumes:
 services:
 
   fcrepo:
-    ports:
-      - 8080:8080
     volumes:
       - fcrepo:/data
 
   solr:
     environment:
       - OOM=script
-    ports:
-      - 8983:8983
 
   web:
     ports:
-      - 3000:3000
+      - 127.0.0.1:3000:3000
+      - "[::1]:3000:3000"
     environment:
       - RAILS_FORCE_SSL=false
     volumes:
@@ -53,8 +50,6 @@ services:
       - ./hyrax:/data:cached
 
   redis:
-    ports:
-      - 6379:6379
     volumes:
       - redis:/data
 
diff --git a/docker-compose.yml b/docker-compose.yml
index fcb918ec..437cb474 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -28,8 +28,6 @@ services:
     image: solr:8
     expose:
       - 8983
-    ports:
-      - 8983:8983
     env_file:
       - .env
     healthcheck:
-- 
GitLab