From 17ad69a82bfbb1e8c9a004d9ddfc1965a40b74b7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jesko=20Ansch=C3=BCtz?= <az@morz.de>
Date: Tue, 24 Mar 2026 17:18:04 +0100
Subject: [PATCH] security-fix: port must not be accessible from outside

---
 compose/server-stack.yml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/compose/server-stack.yml b/compose/server-stack.yml
index fbf615e..8e22b99 100644
--- a/compose/server-stack.yml
+++ b/compose/server-stack.yml
@@ -6,7 +6,7 @@ services:
       POSTGRES_USER: morz_infoboard
       POSTGRES_PASSWORD: morz_infoboard
     ports:
-      - "5432:5432"
+      - "127.0.0.1:5432:5432"
     volumes:
       - postgres-data:/var/lib/postgresql/data
     healthcheck:
@@ -15,19 +15,19 @@ services:
       timeout: 5s
       retries: 10
 
-  mosquitto:
-    image: eclipse-mosquitto:2
-    ports:
-      - "1883:1883"
-    volumes:
-      - ./mosquitto.conf:/mosquitto/config/mosquitto.conf:ro
-
+#  mosquitto:
+#    image: eclipse-mosquitto:2
+#    ports:
+#      - "1883:1883"
+#    volumes:
+#      - ./mosquitto.conf:/mosquitto/config/mosquitto.conf:ro
+#
   backend:
     build:
       context: ../server/backend
       dockerfile: Dockerfile
     ports:
-      - "8080:8080"
+      - "127.0.0.1:8080:8080"
     environment:
       MORZ_INFOBOARD_HTTP_ADDR: ":8080"
       MORZ_INFOBOARD_DATABASE_URL: "postgres://morz_infoboard:morz_infoboard@postgres:5432/morz_infoboard?sslmode=disable"