orion 4ca9e588b5 security: bind all ports to 127.0.0.1 ...

Docker bypasses ufw and exposes 0.0.0.0-bound ports directly via
iptables DNAT rules, even when ufw default policy is deny. Bind
every service port to 127.0.0.1 so only nginx (and SSH tunnels for
wizard) can reach them from outside.

2026-04-16 08:54:19 +00:00

docs

docs: add port map for T1 deployment

2026-04-16 08:49:25 +00:00

mysql-init

Add HarborForge stack to docker-compose

2026-04-15 07:18:47 +01:00

.env.example

Add HarborForge stack to docker-compose

2026-04-15 07:18:47 +01:00

.gitignore

chore: add .gitignore and remove .env from repo

2026-04-15 04:28:16 +00:00

docker-compose.yml

security: bind all ports to 127.0.0.1

2026-04-16 08:54:19 +00:00

Description

No description provided

49 KiB

Languages

Shell 100%