Don't bind internal docker-compose services to external IPs

Author: Nemo157

README.md

@@ -161,9 +161,9 @@ Three services are defined:
 
 | name | access                                          | credentials                | description                            |
 |------|-------------------------------------------------|----------------------------|----------------------------------------|
-| web  | http://localhost:3000                           | N/A                        | A container running the docs.rs binary |
-| db   | postgresql://cratesfyi:password@localhost:15432 | -                          | Postgres database used by web          |
-| s3   | http://localhost:9000                           | `cratesfyi` - `secret_key` | MinIO (simulates AWS S3) used by web   |
+| web  | http://0.0.0.0:3000                             | N/A                        | A container running the docs.rs binary |
+| db   | postgresql://cratesfyi:password@127.0.0.1:15432 | -                          | Postgres database used by web          |
+| s3   | http://127.0.0.1:9000                           | `cratesfyi` - `secret_key` | MinIO (simulates AWS S3) used by web   |
 
 [docker-compose.yml]: ./docker-compose.yml
 

docker-compose.yml

@@ -51,7 +51,7 @@ services:
             POSTGRES_PASSWORD: password
         ports:
             # Use a non-standard port on the host to avoid conflicting with existing postgres servers
-            - "15432:5432"
+            - "127.0.0.1:15432:5432"
         healthcheck:
             test: ["CMD", "pg_isready", "--username", "cratesfyi"]
             interval: 10s
@@ -66,8 +66,8 @@ services:
                 minio server /data --console-address ":9001";
             "
         ports:
-            - "9000:9000"
-            - "9001:9001"
+            - "127.0.0.1:9000:9000"
+            - "127.0.0.1:9001:9001"
         volumes:
             - minio-data:/data
         environment:
@@ -91,7 +91,7 @@ services:
             context: ./dockerfiles
             dockerfile: ./Dockerfile-prometheus
         ports:
-            - "9090:9090"
+            - "127.0.0.1:9090:9090"
         healthcheck:
             test:
                 ["CMD", "curl", "--silent", "--fail", "localhost:9090/-/ready"]