From 4e5ce321b98eead7a50b9f71ec0532e9f55d2474 Mon Sep 17 00:00:00 2001 From: Marko Djordjevic Date: Wed, 18 Feb 2026 10:58:31 +0100 Subject: [PATCH] chore: bind ML service port to 127.0.0.1:8001:8001 for localhost-only access - Changed ML service port binding from 8001:8001 to 127.0.0.1:8001:8001 in docker-compose.yml - Marks task 1.8 as complete in tasks.md --- docker-compose.yml | 2 +- openspec/changes/code-review-fix/tasks.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 74f1251..447b5ef 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -28,7 +28,7 @@ services: ml-service: build: ./services/ml ports: - - "8001:8001" + - "127.0.0.1:8001:8001" volumes: - ml-data:/app/data - mlflow-data:/app/mlruns diff --git a/openspec/changes/code-review-fix/tasks.md b/openspec/changes/code-review-fix/tasks.md index 3370a16..f2a6df8 100644 --- a/openspec/changes/code-review-fix/tasks.md +++ b/openspec/changes/code-review-fix/tasks.md @@ -7,7 +7,7 @@ - [x] 1.5 `[sonnet]` Update `docker-compose.yml` to use `${POSTGRES_USER}`, `${POSTGRES_PASSWORD}`, `${POSTGRES_DB}` env var interpolation in all DATABASE_URL values - [x] 1.6 `[haiku]` Bind PostgreSQL port to `127.0.0.1:5432:5432` in `docker-compose.yml` - [x] 1.7 `[haiku]` Bind MLflow port to `127.0.0.1:5000:5000` in `docker-compose.yml` -- [ ] 1.8 `[haiku]` Bind ML service port to `127.0.0.1:8001:8001` in `docker-compose.yml` +- [x] 1.8 `[haiku]` Bind ML service port to `127.0.0.1:8001:8001` in `docker-compose.yml` ## 2. Security Critical — Input Validation & CORS