You are right, I missed that they are still open for the other services. I have mine running behind traeffik and did removed all port definitions.

I will change the compose file to only expose Reitti.

Thanks for the feedback🙏