From bb8a00c1965274dca66e6a26be33a1014da3ebed Mon Sep 17 00:00:00 2001
From: Manohar <manohar@manohargupta.com>
Date: Sat, 6 Jun 2026 09:41:17 +0530
Subject: [PATCH] fix: bind port 3457 to 127.0.0.1 to prevent direct public
 access

Was bound to 0.0.0.0:3457 making the API reachable without auth.
Now relies exclusively on Traefik (angel.manohargupta.com) for ingress.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 95cfd0d..9286525 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,7 @@ services:
     restart: unless-stopped
     env_file: .env
     ports:
-      - "3457:3457"
+      - "127.0.0.1:3457:3457"
     volumes:
       - ./data:/app/data
     networks: