Keep API private on shared Docker network

2026-09-18 22:52:25 +08:00
parent b2eacd5be9
commit 0a930f227b
7 changed files with 28 additions and 18 deletions
@@ -25,11 +25,11 @@ services:
    tmpfs: [/tmp:rw,noexec,nosuid,size=64m]
    mem_limit: 512m
    pids_limit: 128
-    ports:
-      - "${DEPLOY_BIND_IP:-0.0.0.0}:${DEPLOY_PORT:-18082}:8000"
+    expose:
+      - "8000"
    environment:
      DATABASE_URL: postgresql+psycopg://pk_lab:${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD}@postgres:5432/pk_lab
-      PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-http://localhost:18082}
+      PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-}
      CORS_ORIGINS: ${CORS_ORIGINS:-http://localhost:3000,http://localhost:3002}
      TEST_AUTH_ENABLED: ${TEST_AUTH_ENABLED:-false}
      XHS_HUB_APP_ID: ${XHS_HUB_APP_ID:-}
@@ -39,7 +39,17 @@ services:
    depends_on:
      postgres:
        condition: service_healthy
+    networks:
+      default:
+      public:
+        aliases:
+          - pk-lab-api

 volumes:
  postgres-data:
    name: pk-lab-postgres-data
+
+networks:
+  public:
+    name: pk-lab-public
+    external: true