Comment on Hosting multiple services with one IP address.
kossa@feddit.org 4 days agoYep, fair. Those docker-composes which just forward the ports to the host on all interfaces should burn. At least they should make them 127.0.0.1 forwards, I agree.
kumi@feddit.online 4 days ago
I’m guilty of a few of these and sorry not sorry but this is not changing.
Often these are written with local dev and testing in mind, and in any case the expectation is that self-hosters will look through them and probably customize them - and in any case be responsble for their own firewalls and proxies - before deploying them to a public-facing server.
Never just run compose files on a machine directly exposed to the internet.