open docker ports on localhost only

playbooks/apps/files/bin/borg-sync

@@ -4,11 +4,7 @@
 SOURCE_DIRECTORY="/mnt/data/nextcloud-aio/backups/borg"
 RCLONE_CONFIG="borgbase-nextcloud-aio"
 
-TARGET_DIRECTORY="repo" # this is the BorgBase directory name: modify it only if you want to specify a different one (discouraged)
+TARGET_DIRECTORY="repo"
-
-########################################
-# DO NOT modify any of the following! #
-########################################
 
 if [ "$EUID" -ne 0 ]; then
     echo "run as root"
@@ -39,19 +35,11 @@ touch "$SOURCE_DIRECTORY/aio-lockfile"
 
 
 if ! rclone sync -v --exclude aio-lockfile "$SOURCE_DIRECTORY/" "$RCLONE_CONFIG:$TARGET_DIRECTORY"; then
-    if docker ps --format "{{.Names}}" | grep "^nextcloud-aio-nextcloud$"; then
-        docker exec -en nextcloud-aio-nextcloud bash /notify.sh "Rclone failed." "Failed to synchronise the backup repository with the target directory."
-    else
     echo "Failed to synchronise the backup repository with the target directory."
-    fi
     rm "$SOURCE_DIRECTORY/aio-lockfile"
     exit 1
 fi
 
 rm "$SOURCE_DIRECTORY/aio-lockfile"
 
-if docker ps --format "{{.Names}}" | grep "^nextcloud-aio-nextcloud$"; then
+echo "Done"
-    docker exec -en nextcloud-aio-nextcloud bash /notify.sh "Rclone backup successful!" "Synchronised the backup repository successfully."
-else
-    echo "Synchronised the backup repository successfully."
-fi

playbooks/apps/files/charasheet/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       - ./db:/app/db
       - ./data:/app/data
     ports:
-      - "8001:8000"
+      - "127.0.0.1:8001:8000"
     user: 1000:1000
     restart: always
     init: true

playbooks/apps/files/checkout/docker-compose.yml

@@ -7,7 +7,7 @@ services:
       - ./db:/app/db
       - ./media:/app/media
     ports:
-      - "8002:8000"
+      - "127.0.0.1:8002:8000"
     restart: always
     init: true
     tty: true

playbooks/apps/files/code/docker-compose.yaml

@@ -8,4 +8,4 @@ services:
     mem_limit: 3g
     cpus: 3
     ports:
-      - "9002:8443"
+      - "127.0.0.1:9002:8443"

playbooks/apps/files/display/docker-compose.yaml

@@ -4,4 +4,4 @@ services:
       context: sources
     restart: always
     ports:
-      - "9010:80"
+      - "127.0.0.1:9010:80"

playbooks/apps/files/git/docker-compose.yaml

@@ -8,6 +8,6 @@ services:
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     ports:
-      - "23730:22"
+      - "127.0.0.1:23730:22"
-      - "8006:3000"
+      - "127.0.0.1:8006:3000"
     mem_limit: 512m

playbooks/apps/files/media/docker-compose.yaml

@@ -4,7 +4,7 @@ services:
     restart: always
     env_file: plex.env
     ports:
-      - "9003:32400"
+      - "127.0.0.1:9003:32400"
 #      - "32400:32400/tcp"
 #      - "3005:3005/tcp"
 #      - "8324:8324/tcp"
@@ -27,7 +27,7 @@ services:
       - ./data:/data
     mem_limit: 2g
     ports:
-      - "9004:9091"
+      - "127.0.0.1:9004:9091"
   sonarr:
     image: lscr.io/linuxserver/sonarr:latest
     restart: always
@@ -37,7 +37,7 @@ services:
       - ./data:/data
     mem_limit: 1g
     ports:
-      - "9005:8989"
+      - "127.0.0.1:9005:8989"
   prowlarr:
     image: lscr.io/linuxserver/prowlarr:latest
     restart: always
@@ -46,7 +46,7 @@ services:
       - ./prowlarr:/config
     mem_limit: 1g
     ports:
-      - "9006:9696"
+      - "127.0.0.1:9006:9696"
   radarr:
     image: lscr.io/linuxserver/radarr:latest
     restart: always
@@ -56,7 +56,7 @@ services:
       - ./data:/data
     mem_limit: 1g
     ports:
-      - "9007:7878"
+      - "127.0.0.1:9007:7878"
   unpackerr:
     image: golift/unpackerr
     volumes:

playbooks/apps/files/miniflux/docker-compose.yaml

@@ -9,7 +9,7 @@ services:
       test: ["CMD", "/usr/bin/miniflux", "-healthcheck", "auto"]
     mem_limit: 512m
     ports:
-      - "8008:3298"
+      - "127.0.0.1:8008:3298"
   db:
     image: postgres:15
     restart: always

playbooks/apps/files/nextcloud-aio/docker-compose.yaml

@@ -26,7 +26,7 @@ services:
 #    security_opt: ["label:disable"] # Is needed when using SELinux
 
     ports:
-      - "9011:8080"
+      - "127.0.0.1:9011:8080"
     restart: always
     container_name: nextcloud-aio-mastercontainer
     init: true

playbooks/apps/files/portainer/docker-compose.yaml

@@ -6,4 +6,4 @@ services:
       - ./portainer_data:/data
       - /var/run/docker.sock:/var/run/docker.sock
     ports:
-      - "9001:9443"
+      - "127.0.0.1:9001:9443"

playbooks/apps/files/privatebin/docker-compose.yaml

@@ -9,4 +9,4 @@ services:
     cpus: 0.5
     mem_limit: 150m
     ports:
-      - "8010:8080"
+      - "127.0.0.1:8010:8080"

playbooks/apps/files/shortener/docker-compose.yaml

@@ -7,4 +7,4 @@ services:
       - ./shortener_data:/db
     mem_limit: 300m
     ports:
-      - "8011:8000"
+      - "127.0.0.1:8011:8000"

playbooks/apps/files/test_headers/docker-compose.yaml

@@ -5,6 +5,6 @@ services:
     volumes:
       - ./:/app
     ports:
-      - "9008:8080"
+      - "127.0.0.1:9008:8080"
     init: true
     tty: true

playbooks/apps/files/wallabag/docker-compose.yaml

@@ -7,4 +7,4 @@ services:
       - ./wallabag_data/data:/var/www/wallabag/data
       - ./wallabag_data/images:/var/www/wallabag/web/assets/images
     ports:
-      - "8009:80"
+      - "127.0.0.1:8009:80"

playbooks/apps/templates/collabora/docker-compose.yaml.j2

@@ -11,4 +11,4 @@ services:
       extra_params: '--o:ssl.enable=false --o:ssl.termination=true'
     mem_limit: 2g
     ports:
-      - "8007:9980"
+      - "127.0.0.1:8007:9980"

playbooks/apps/templates/manuels/docker-compose.yaml.j2

@@ -12,7 +12,7 @@ services:
     tty: true
     mem_limit: 512m
     ports:
-      - "8012:8000"
+      - "127.0.0.1:8012:8000"
   db:
     image: postgres:15
     restart: always