fleet/.github
Victor Lyuboslavsky ea22c8087b
Bind docker ports to 127.0.0.1 (#42232)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #42226

When doing dev in a remote environment, like a public cloud VM, don't
expose ports to the public.
This is a contributor security improvement.

The localstack fail is present on main, and was not caused by this
change:
https://github.com/fleetdm/fleet/actions/runs/23439965808/job/68187858627

# Checklist for submitter

## Testing

- [x] QA'd all new/changed functionality manually


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Docker Compose configuration updated across multiple services (Redis,
MySQL, mail, monitoring, and storage services) to restrict port bindings
to localhost only instead of all network interfaces.
* Documentation Docker Compose examples updated to reflect
localhost-only port binding for core services.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-23 12:30:23 -05:00
..
actions Update fleet-eng vulnerable dependency. (#41339) 2026-03-10 11:01:50 -05:00
ISSUE_TEMPLATE Update story template: Instructions for new tables (#42090) 2026-03-23 11:15:24 +00:00
scripts Standardize macOS app update queries and related automation (#39164) 2026-02-03 17:52:07 -06:00
workflows Bind docker ports to 127.0.0.1 (#42232) 2026-03-23 12:30:23 -05:00
dependabot.yml Remove daily schedule so it only gets triggered by security alerts (#14871) 2023-11-02 09:53:40 -05:00
pull_request_template.md Update pull request template for input validation checklist (#41373) 2026-03-17 10:52:54 -04:00