Reduced port exposure to localhost

roles/docker-gitea/tasks/main.yml

@@ -28,7 +28,7 @@
           - RUN_MODE="{{run_mode}}"
           - ROOT_URL="https://{{domain}}/"
         ports:
-          - "{{http_port}}:3000"
+          - "127.0.0.1:{{http_port}}:3000"
           - "{{ssh_port}}:22"
         links:
           - database

roles/docker-jenkins/tasks/main.yml

@@ -13,7 +13,7 @@
         image: jenkins/jenkins:lts
         restart: always
         ports:
-          - "{{http_port}}:8080"
+          - "127.0.0.1:{{http_port}}:8080"
         restart: always
         volumes:
           - jenkins_data:/var/jenkins_home

roles/docker-joomla/tasks/main.yml

@@ -23,7 +23,7 @@
         volumes:
           - joomla-data:/var/www/html
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
       database:
         image: mariadb
         environment:

roles/docker-mediawiki/tasks/main.yml

@@ -17,7 +17,7 @@
         volumes:
           - "mediawiki-data:/var/www/html/"
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
       database:
         image: mariadb
         environment:

roles/docker-mybb/tasks/main.yml

@@ -31,7 +31,7 @@
         image: nginx:mainline
         restart: always
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
         volumes:
         - "{{conf_d_docker_path}}:{{conf_d_path}}"
         - "mybb-data:/var/www/html:ro"

roles/docker-nextcloud/tasks/main.yml

@@ -18,7 +18,7 @@
         volumes:
           - nextcloud-data:/var/www/html
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
         environment:
           MYSQL_DATABASE: "nextcloud"
           MYSQL_USER: "nextcloud"

roles/docker-postfix/tasks/main.yml

@@ -23,7 +23,7 @@
         links:
           - database
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
       database:
         image: mariadb
         environment:

roles/docker-wireguard/tasks/main.yml

@@ -19,7 +19,7 @@
         image: linuxserver/wireguard
         restart: always
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
         cap_add:
           - NET_ADMIN
           - SYS_MODULE

roles/docker-wordpress/tasks/main.yml

@@ -16,7 +16,7 @@
         image: wordpress
         restart: always
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
         environment:
           WORDPRESS_DB_HOST: database:3306
           WORDPRESS_DB_USER: "wordpress"

roles/docker-yourls/tasks/main.yml

@@ -14,7 +14,7 @@
         image: yourls
         restart: always
         ports:
-          - "{{http_port}}:80"
+          - "127.0.0.1:{{http_port}}:80"
         environment:
           YOURLS_DB_HOST: "database:3306"
           YOURLS_DB_USER: "yourls"