From e29cc58ae70fbb79094b16cbc06946ae3b94d5b1 Mon Sep 17 00:00:00 2001
From: Saravana Kumar <saravanakumardb1@gmail.com>
Date: Wed, 27 May 2026 21:29:22 +0000
Subject: [PATCH] fix: bind app host ports to loopback

---
 docker-compose.ecosystem.yml | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/docker-compose.ecosystem.yml b/docker-compose.ecosystem.yml
index a28d3ec3..84bdf549 100644
--- a/docker-compose.ecosystem.yml
+++ b/docker-compose.ecosystem.yml
@@ -106,7 +106,7 @@ services:
   grafana:
     image: grafana/grafana:11.4.0
     ports:
-      - '3000:3000'
+      - '127.0.0.1:3000:3000'
     environment:
       - GF_SECURITY_ADMIN_USER=admin
       - GF_SECURITY_ADMIN_PASSWORD=bytelyst
@@ -218,7 +218,7 @@ services:
       - '--accesslog.format=json'
     ports:
       - '80:80'
-      - '8080:8080'
+      - '127.0.0.1:8080:8080'
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
     depends_on:
@@ -340,7 +340,7 @@ services:
       context: .
       dockerfile: dashboards/admin-web/Dockerfile
     ports:
-      - '3001:3001'
+      - '127.0.0.1:3001:3001'
     env_file:
       - .env.ecosystem
     environment:
@@ -365,7 +365,7 @@ services:
       context: .
       dockerfile: dashboards/tracker-web/Dockerfile
     ports:
-      - '3003:3003'
+      - '127.0.0.1:3003:3003'
     env_file:
       - .env.ecosystem
     environment:
@@ -608,7 +608,7 @@ services:
       context: ../learning_ai_efforise
       dockerfile: backend/Dockerfile
     ports:
-      - '4020:4020'
+      - '127.0.0.1:4020:4020'
     env_file:
       - .env.ecosystem
     environment:
@@ -640,7 +640,7 @@ services:
         NEXT_PUBLIC_PLATFORM_SERVICE_URL: http://localhost:4003
         NEXT_PUBLIC_PRODUCT_ID: lysnrai
     ports:
-      - '3002:3002'
+      - '127.0.0.1:3002:3002'
     environment:
       - NODE_ENV=production
       - PORT=3002
@@ -667,7 +667,7 @@ services:
         NEXT_PUBLIC_BACKEND_URL: http://localhost:4011
         NEXT_PUBLIC_PLATFORM_SERVICE_URL: http://localhost:4003
     ports:
-      - '3030:3030'
+      - '127.0.0.1:3030:3030'
     environment:
       - NODE_ENV=production
       - PORT=3030
@@ -692,7 +692,7 @@ services:
         GITEA_NPM_HOST: ${GITEA_NPM_HOST:-host.docker.internal}
         NEXT_PUBLIC_PLATFORM_SERVICE_URL: http://localhost:4003
     ports:
-      - '3035:3035'
+      - '127.0.0.1:3035:3035'
     environment:
       - NODE_ENV=production
       - PORT=3035
@@ -718,7 +718,7 @@ services:
         NEXT_PUBLIC_API_URL: http://localhost:4017
         NEXT_PUBLIC_PLATFORM_URL: http://localhost:4003/api
     ports:
-      - '3040:3040'
+      - '127.0.0.1:3040:3040'
     environment:
       - NODE_ENV=production
       - PORT=3040
@@ -745,7 +745,7 @@ services:
         NEXT_PUBLIC_NOTES_API_URL: http://localhost:4016/api
         NEXT_PUBLIC_PLATFORM_SERVICE_URL: http://localhost:4003/api
     ports:
-      - '3045:3045'
+      - '127.0.0.1:3045:3045'
     environment:
       - NODE_ENV=production
       - PORT=3045
@@ -770,7 +770,7 @@ services:
         GITEA_NPM_HOST: ${GITEA_NPM_HOST:-host.docker.internal}
         NEXT_PUBLIC_PLATFORM_SERVICE_URL: http://localhost:4003
     ports:
-      - '3050:3050'
+      - '127.0.0.1:3050:3050'
     environment:
       - NODE_ENV=production
       - PORT=3050
@@ -800,7 +800,7 @@ services:
         NEXT_PUBLIC_API_URL: http://localhost:4018
         NEXT_PUBLIC_PLATFORM_URL: http://localhost:4003
     ports:
-      - '3060:3060'
+      - '127.0.0.1:3060:3060'
     environment:
       - NODE_ENV=production
       - PORT=3060
@@ -827,7 +827,7 @@ services:
         NEXT_PUBLIC_BACKEND_URL: http://localhost:4019
         NEXT_PUBLIC_PLATFORM_URL: http://localhost:4003
     ports:
-      - '3070:3070'
+      - '127.0.0.1:3070:3070'
     environment:
       - NODE_ENV=production
       - PORT=3070
@@ -850,7 +850,7 @@ services:
       context: ../learning_ai_efforise
       dockerfile: client/Dockerfile
     ports:
-      - '3080:3080'
+      - '127.0.0.1:3080:3080'
     depends_on:
       efforise-backend:
         condition: service_healthy
@@ -872,7 +872,7 @@ services:
         GITEA_NPM_HOST: ${GITEA_NPM_HOST:-host.docker.internal}
         OLLAMA_URL: http://host.docker.internal:11434
     ports:
-      - '3075:3075'
+      - '127.0.0.1:3075:3075'
     environment:
       - NODE_ENV=production
       - PORT=3075