Skip to content

Security: Restrict PostgreSQL port binding to localhost in docker-compose.db.yml #484

@coderabbitai

Description

@coderabbitai

Description

The PostgreSQL port in apps/api/docker-compose.db.yml is currently exposed to all network interfaces (0.0.0.0), which is a security risk. It should be restricted to localhost (127.0.0.1) similar to how the API and Redis services are configured.

Location

File: apps/api/docker-compose.db.yml
Line: 26

Context

This issue was identified during the review of PR #482 which adds separate Docker Compose files for different service combinations.

References

Requested by

@kshitij-k-osmosys

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions