From 8eff51e5e0a9a6ead319f31769c95ba54c7c62ce Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Mario=20Ba=C5=A1i=C4=87?= Date: Thu, 3 Dec 2020 17:07:46 +0100 Subject: [PATCH] Make plausible/analytics container port local only This change makes the container plausible/analytics accessible only from localhost (127.0.0.1). I think that this should be the default because: - to use plausible with a https website, plausible should be served from https. Requires reverse proxy. - using plausible with http makes it vulnerable to "hackers" when entering admin password and the entire traffic can be seen by "anyone", thus making it insecure. --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index c3ac7b4..4de9278 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -30,7 +30,7 @@ services: - plausible_events_db - mail ports: - - 8000:8000 + - 127.0.0.1:8000:8000 env_file: - plausible-conf.env