diff --git a/apps/archy-mempool-web/manifest.yml b/apps/archy-mempool-web/manifest.yml index 6d84df8d2..d18acc76b 100644 --- a/apps/archy-mempool-web/manifest.yml +++ b/apps/archy-mempool-web/manifest.yml @@ -26,6 +26,8 @@ app: - host: 4080 container: 8080 protocol: tcp + bind: 127.0.0.1 + auth: gated environment: - FRONTEND_HTTP_PORT=8080 diff --git a/apps/archy-nbxplorer/manifest.yml b/apps/archy-nbxplorer/manifest.yml index 21ce43bfd..a13c1bb77 100644 --- a/apps/archy-nbxplorer/manifest.yml +++ b/apps/archy-nbxplorer/manifest.yml @@ -33,6 +33,8 @@ app: - host: 32838 container: 32838 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/barkd/manifest.yml b/apps/barkd/manifest.yml index 5ba3d40db..171ed8693 100644 --- a/apps/barkd/manifest.yml +++ b/apps/barkd/manifest.yml @@ -51,6 +51,8 @@ app: - host: 3535 container: 3535 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: # Holds the wallet DB, mnemonic and auth token. ARK funds are recoverable diff --git a/apps/btcpay-server/manifest.yml b/apps/btcpay-server/manifest.yml index 8f42a95c0..703a9f0cd 100644 --- a/apps/btcpay-server/manifest.yml +++ b/apps/btcpay-server/manifest.yml @@ -45,6 +45,8 @@ app: - host: 23000 container: 49392 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/did-wallet/manifest.yml b/apps/did-wallet/manifest.yml index c89f6561a..413df0a2d 100644 --- a/apps/did-wallet/manifest.yml +++ b/apps/did-wallet/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8088 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/fedimint-clientd/manifest.yml b/apps/fedimint-clientd/manifest.yml index 38d81bba3..898b31bee 100644 --- a/apps/fedimint-clientd/manifest.yml +++ b/apps/fedimint-clientd/manifest.yml @@ -66,6 +66,8 @@ app: - host: 8178 container: 8080 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: # Same dir the first-boot bundled path uses + where the wallet bridge reads diff --git a/apps/fedimint/manifest.yml b/apps/fedimint/manifest.yml index 88f17e156..c3c7985a7 100644 --- a/apps/fedimint/manifest.yml +++ b/apps/fedimint/manifest.yml @@ -58,6 +58,8 @@ app: - host: 8177 container: 8175 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/filebrowser/manifest.yml b/apps/filebrowser/manifest.yml index 2d24bc143..a47b9431e 100644 --- a/apps/filebrowser/manifest.yml +++ b/apps/filebrowser/manifest.yml @@ -27,6 +27,8 @@ app: - host: 8083 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/gitea/manifest.yml b/apps/gitea/manifest.yml index 4926ba3f0..0a4a22935 100644 --- a/apps/gitea/manifest.yml +++ b/apps/gitea/manifest.yml @@ -26,6 +26,8 @@ app: - host: 3001 container: 3000 protocol: tcp + bind: 127.0.0.1 + auth: gated - host: 2222 container: 22 protocol: tcp diff --git a/apps/grafana/manifest.yml b/apps/grafana/manifest.yml index ed6a6b421..3ef6938aa 100644 --- a/apps/grafana/manifest.yml +++ b/apps/grafana/manifest.yml @@ -31,6 +31,8 @@ app: - host: 3000 container: 3000 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/home-assistant/manifest.yml b/apps/home-assistant/manifest.yml index 135db17bb..7a4c3a2f8 100644 --- a/apps/home-assistant/manifest.yml +++ b/apps/home-assistant/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8123 container: 8123 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/immich/manifest.yml b/apps/immich/manifest.yml index 73fff674c..a09b23dd7 100644 --- a/apps/immich/manifest.yml +++ b/apps/immich/manifest.yml @@ -44,6 +44,8 @@ app: - host: 2283 container: 2283 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/indeedhub/manifest.yml b/apps/indeedhub/manifest.yml index 471678c4a..a71f67776 100644 --- a/apps/indeedhub/manifest.yml +++ b/apps/indeedhub/manifest.yml @@ -38,6 +38,8 @@ app: - host: 7778 container: 7777 protocol: tcp # Web UI. Port 7777 on the host is reserved for the Nostr relay. + bind: 127.0.0.1 + auth: gated # Writable scratch the baked nginx needs; matches the legacy installer's # --tmpfs /run + /var/cache/nginx. diff --git a/apps/jellyfin/manifest.yml b/apps/jellyfin/manifest.yml index 7234c1c8f..94ab14240 100644 --- a/apps/jellyfin/manifest.yml +++ b/apps/jellyfin/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8096 container: 8096 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/mempool-api/manifest.yml b/apps/mempool-api/manifest.yml index 24b628cee..9bf8fe27d 100644 --- a/apps/mempool-api/manifest.yml +++ b/apps/mempool-api/manifest.yml @@ -42,6 +42,8 @@ app: - host: 8999 container: 8999 protocol: tcp + bind: 127.0.0.1 + auth: local volumes: - type: bind diff --git a/apps/mempool/manifest.yml b/apps/mempool/manifest.yml index fbaf72635..ee64420b7 100644 --- a/apps/mempool/manifest.yml +++ b/apps/mempool/manifest.yml @@ -33,6 +33,8 @@ app: - host: 4080 container: 8080 # mempool-frontend nginx listens on 8080 (FRONTEND_HTTP_PORT=8080) protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/morphos-server/manifest.yml b/apps/morphos-server/manifest.yml index dd032bf42..329756499 100644 --- a/apps/morphos-server/manifest.yml +++ b/apps/morphos-server/manifest.yml @@ -30,6 +30,8 @@ app: - host: 8089 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/nextcloud/manifest.yml b/apps/nextcloud/manifest.yml index a81658685..6fb16d44f 100644 --- a/apps/nextcloud/manifest.yml +++ b/apps/nextcloud/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8085 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/nostr-rs-relay/manifest.yml b/apps/nostr-rs-relay/manifest.yml index 975a07aef..5bfb5bde6 100644 --- a/apps/nostr-rs-relay/manifest.yml +++ b/apps/nostr-rs-relay/manifest.yml @@ -31,6 +31,8 @@ app: - host: 18081 container: 8080 protocol: tcp # HTTP/WebSocket + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/photoprism/manifest.yml b/apps/photoprism/manifest.yml index 485d5936e..88cbcb73f 100644 --- a/apps/photoprism/manifest.yml +++ b/apps/photoprism/manifest.yml @@ -24,6 +24,8 @@ app: - host: 2342 container: 2342 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/portainer/manifest.yml b/apps/portainer/manifest.yml index 2307b504f..70fdac89c 100644 --- a/apps/portainer/manifest.yml +++ b/apps/portainer/manifest.yml @@ -27,6 +27,8 @@ app: - host: 9000 container: 9000 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/searxng/manifest.yml b/apps/searxng/manifest.yml index 1eeb727d7..0727ff364 100644 --- a/apps/searxng/manifest.yml +++ b/apps/searxng/manifest.yml @@ -29,6 +29,8 @@ app: - host: 8888 container: 8080 protocol: tcp # Web UI + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/strfry/manifest.yml b/apps/strfry/manifest.yml index ef74ed72e..eac12a1d4 100644 --- a/apps/strfry/manifest.yml +++ b/apps/strfry/manifest.yml @@ -29,6 +29,8 @@ app: - host: 8090 container: 7777 protocol: tcp # HTTP/WebSocket (strfry listens on 7777) + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/uptime-kuma/manifest.yml b/apps/uptime-kuma/manifest.yml index e58f0bbef..391b3c888 100644 --- a/apps/uptime-kuma/manifest.yml +++ b/apps/uptime-kuma/manifest.yml @@ -26,6 +26,8 @@ app: - host: 3002 container: 3001 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind diff --git a/apps/vaultwarden/manifest.yml b/apps/vaultwarden/manifest.yml index 2f3d49d36..1e85629fc 100644 --- a/apps/vaultwarden/manifest.yml +++ b/apps/vaultwarden/manifest.yml @@ -25,6 +25,8 @@ app: - host: 8082 container: 80 protocol: tcp + bind: 127.0.0.1 + auth: gated volumes: - type: bind