fix: restrict Dozzle to localhost-only binding

Bind Dozzle to 127.0.0.1 to prevent exposure on external/LAN interfaces.
Previously bound to 0.0.0.0, allowing unauthenticated access to container
logs from any network-reachable host.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Scott Idem
2026-04-29 14:02:48 -04:00
parent 47fe502dc1
commit 6c6de37419

View File

@@ -202,7 +202,7 @@ services:
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
ports: ports:
- "${AE_DOZZLE_PORT:-8881}:8080" - "127.0.0.1:${AE_DOZZLE_PORT:-8881}:8080"
restart: unless-stopped restart: unless-stopped
logging: logging:
driver: "json-file" driver: "json-file"